|
|
@@ -16,6 +16,16 @@ $$\rho=\eta^{sk_{sl}^{COIN}}$$
|
|
|
$\eta$ is is from random oracle evaluated at $(Nonce||\eta_{ep}||sl)$, $\rho$ is the following epoch's seed. $\emph{ptr}$ is the hash of the previous block, $\pi$ is the NIZK proof of the LEAD statement.
|
|
|
|
|
|
## LEAD statement
|
|
|
+for $x=(cm_{c_2},sn_{c_1},\eta,sl,\rho,h,ptr,\mu_{\rho},\mu_{y},root)$, and
|
|
|
+$w=(path,root_{sk^{COIN}},path_{sk^{COIN}},\tau_c,\rho_c,r_{c_1},v,r_{c_2})$
|
|
|
+for tuple $(x,w) \in L_{lead}$ iff:
|
|
|
|
|
|
-# Crypsinous leaderelection
|
|
|
-TODO
|
|
|
+ * $pk^{COIN} = RPF_{root_{sk^{COIN}}}^{pk}(\tau_c)$.
|
|
|
+ * $\rho_{c_2}=RPF_{root_{sk_{c_1}^{COIN}}}^{evl}(\rho_{c_1})$.
|
|
|
+ * $\forall i \in \{1,2\} : DeComm(cm_{c_i},pk^{COIN}||v||\rho_{c_i},r_{c_i})=T$.
|
|
|
+ * \emph{path} is a valid Merkle tree path to cm_c_1 in the tree with the root \emph{root}.
|
|
|
+ * \emph{$path_{sk^{COIN}}$} is a valid path to a leaf at position $sl-\tau_c$ in a tree with a root $root_{sk^{COIN}}$.
|
|
|
+ * $sn_{c_1}= RPF_{root_{sk}^{COIN}}^{sn}(\rho_{c_1})$
|
|
|
+ * $y = \mu_{y}^{root_{sk_{c_1}^{COIN}}||\rho_c}$
|
|
|
+ * $\rho = \mu_{\rho}^{root_{sk_{c_1}^{COIN}}||\rho_c}$
|
|
|
+ * $y< ord(G)\phi_f(v)$
|