|
@@ -2,14 +2,14 @@
|
|
|
|
|
|
|
|
$$ X = (nullifier, cm^{value}_x, cm^{value}_y, cm^{token}, root, data, spendHook, signature^{public}_x, signature^{public}_y) $$
|
|
$$ X = (nullifier, cm^{value}_x, cm^{value}_y, cm^{token}, root, data, spendHook, signature^{public}_x, signature^{public}_y) $$
|
|
|
|
|
|
|
|
-$$ W = (value, token, blind^{value}, blind^{token}, sn, spendHook, data, blind^{data}, sk, pos^{leaf}, path, signature^{secret}) $$
|
|
|
|
|
|
|
+$$ W = (value, token, blind^{value}, blind^{token}, sn, spendHook, data, blind^{data}, sk, pos, path, signature^{secret}) $$
|
|
|
|
|
|
|
|
$$ \mathcal{L} = \{X:W\in \mathcal{R}\} $$
|
|
$$ \mathcal{L} = \{X:W\in \mathcal{R}\} $$
|
|
|
|
|
|
|
|
|
|
|
|
|
| Public Input | Description |
|
|
| Public Input | Description |
|
|
|
|----------------------|---------------------------------------------------------|
|
|
|----------------------|---------------------------------------------------------|
|
|
|
-| nullifier | hash of (secretKey||serial) |
|
|
|
|
|
|
|
+| nullifier | hash of (sk||sn) |
|
|
|
| $cm^{value}_x$ | x coordinate of value point commitment |
|
|
| $cm^{value}_x$ | x coordinate of value point commitment |
|
|
|
| $cm^{value}_y$ | y coordinate of value point commitment |
|
|
| $cm^{value}_y$ | y coordinate of value point commitment |
|
|
|
| $cm^{token}$ | commitment of tokenId as field element |
|
|
| $cm^{token}$ | commitment of tokenId as field element |
|
|
@@ -31,6 +31,6 @@ $$ \mathcal{L} = \{X:W\in \mathcal{R}\} $$
|
|
|
| data | data read during spendHook execution |
|
|
| data | data read during spendHook execution |
|
|
|
| $blind^{data}$ | blinding term for data commitment |
|
|
| $blind^{data}$ | blinding term for data commitment |
|
|
|
| sk | coin private key |
|
|
| sk | coin private key |
|
|
|
-| $pos^{leaf}$ | coin commitment leaf position in the merkle tree |
|
|
|
|
|
|
|
+| pos | coin commitment leaf position in the merkle tree |
|
|
|
| path | coin commitment merkle tree path |
|
|
| path | coin commitment merkle tree path |
|
|
|
| $signature^{secret}$ | signature secret key |
|
|
| $signature^{secret}$ | signature secret key |
|