Skip to content

Commit 84e83b3

Browse files
committed
deploy: 83cadff
1 parent cd2c97c commit 84e83b3

File tree

3 files changed

+9
-6
lines changed

3 files changed

+9
-6
lines changed

04/index.html

+2-1
Original file line numberDiff line numberDiff line change
@@ -933,7 +933,8 @@ <h1 id="mint-quote">Mint quote<a class="headerlink" href="#mint-quote" title="Pe
933933
<li><code>"ISSUED"</code> means that the quote has already been issued.</li>
934934
</ul>
935935
<blockquote>
936-
<p>[!CAUTION] &gt; <code>quote</code> is a <strong>unique and random</strong> id generated by the mint to internally look up the payment state. <code>quote</code> <strong>MUST</strong> remain a secret between user and mint and <strong>MUST NOT</strong> be derivable from the payment request. A third party who knows the <code>quote</code> ID can front-run and steal the tokens that this operation mints.</p>
936+
<p>[!CAUTION]</p>
937+
<p><code>quote</code> is a <strong>unique and random</strong> id generated by the mint to internally look up the payment state. <code>quote</code> <strong>MUST</strong> remain a secret between user and mint and <strong>MUST NOT</strong> be derivable from the payment request. A third party who knows the <code>quote</code> ID can front-run and steal the tokens that this operation mints.</p>
937938
</blockquote>
938939
<h2 id="example">Example<a class="headerlink" href="#example" title="Permanent link">&para;</a></h2>
939940
<p>Request of <code>Alice</code> with curl:</p>

20/index.html

+6-4
Original file line numberDiff line numberDiff line change
@@ -1016,7 +1016,8 @@ <h1 id="nut-20-signature-on-mint-quote">NUT-20: Signature on Mint Quote<a class=
10161016
<hr />
10171017
<p>This NUT defines signature-based authentication for mint quote redemption. When requesting a mint quote, clients provide a public key. The mint will then require a valid signature from the corresponding secret key to process the mint operation.</p>
10181018
<blockquote>
1019-
<p>[!CAUTION] &gt; <a href="../04/">NUT-04</a> mint quotes without a public key can be minted by anyone who knows the mint quote id without providing a signature.</p>
1019+
<p>[!CAUTION]</p>
1020+
<p><a href="../04/">NUT-04</a> mint quotes without a public key can be minted by anyone who knows the mint quote id without providing a signature.</p>
10201021
</blockquote>
10211022
<h2 id="mint-quote">Mint quote<a class="headerlink" href="#mint-quote" title="Permanent link">&para;</a></h2>
10221023
<p>To request a mint quote, the wallet of <code>Alice</code> makes a <code>POST /v1/mint/quote/{method}</code> request where <code>method</code> is the payment method requested. We present an example with the <code>method</code> being <code>bolt11</code> here.</p>
@@ -1035,7 +1036,8 @@ <h2 id="mint-quote">Mint quote<a class="headerlink" href="#mint-quote" title="Pe
10351036
<p>with the requested <code>amount</code>,<code>unit</code>, and <code>description</code> according to <a href="../04/">NUT-04</a>.</p>
10361037
<p><code>pubkey</code> is the public key that will be required for signature verification during the minting operation. The mint will only mint ecash after receiving a valid signature from the corresponding private key in the subsequent <code>PostMintRequest</code>.</p>
10371038
<blockquote>
1038-
<p>[!IMPORTANT] &gt; <strong>Privacy:</strong> To prevent the mint from being able to link multiple mint quotes, wallets <strong>SHOULD</strong> generate a unique public key for each mint quote request.</p>
1039+
<p>[!IMPORTANT]</p>
1040+
<p><strong>Privacy:</strong> To prevent the mint from being able to link multiple mint quotes, wallets <strong>SHOULD</strong> generate a unique public key for each mint quote request.</p>
10391041
</blockquote>
10401042
<p>The mint <code>Bob</code> then responds with a <code>PostMintQuoteBolt11Response</code>:</p>
10411043
<div class="codehilite"><pre><span></span><code><span class="p">{</span>
@@ -1067,8 +1069,8 @@ <h2 id="signing-the-mint-request">Signing the mint request<a class="headerlink"
10671069
<h3 id="message-aggregation">Message aggregation<a class="headerlink" href="#message-aggregation" title="Permanent link">&para;</a></h3>
10681070
<p>To provide a signature for a mint request, the owner of the signing public keys must concatenate the quote ID <code>quote</code> in <code>PostMintQuoteBolt11Response</code> and the <code>B_</code> fields of all <code>BlindedMessages</code> in the <code>PostMintBolt11Request</code> (i.e., the outputs, see <a href="../00/">NUT-00</a>) to a single message string in the order they appear in the <code>PostMintRequest</code>. This concatenated string is then hashed and signed (see <a href="#signature-scheme">Signature scheme</a>).</p>
10691071
<blockquote>
1070-
<p>[!NOTE]
1071-
Concatenating the quote ID and the outputs into a single message prevents maliciously replacing the outputs.</p>
1072+
<p>[!NOTE]</p>
1073+
<p>Concatenating the quote ID and the outputs into a single message prevents maliciously replacing the outputs.</p>
10721074
</blockquote>
10731075
<p>If a request has <code>n</code> outputs, the message to sign becomes:</p>
10741076
<div class="codehilite"><pre><span></span><code>msg_to_sign = quote || B_0 || ... || B_(n-1)

search/search_index.json

+1-1
Large diffs are not rendered by default.

0 commit comments

Comments
 (0)