consensus_contracts.md 7.3 KB
consensus
leadership burn proof
proof of burn of staked coin.
$$ X = $$ $$ W = $$ $$ \mathcal{L}= {X:W\in \mathcal{R}} $$
| Public Input | Description |
|---|---|
| sn | nullifier is hash of nonce nonce, and sk |
| ep | epoch index |
| $pk_x$ | coin public key pk affine x coordinate |
| $pk_y$ | coin public key pk affine y coordinate |
| root | root of coins commitments tree |
| $cm_x^{value}$ | value commitment affine x coordinate |
| $cm_y^{value}$ | value commitment affine y coordinate |
| Witnesses | Description |
|---|---|
| value | coin value $\in \mathbb{Z}$ or u64 |
| ep | epoch index |
| nonce | random nonce derived from previous coin |
| $value_{blind}$ | blinding scalar for value commitment |
| sk | coin secret key |
| $\tau$ | C position rooted by root |
| path | path of C at position $\tau$ |
| Functions | Description |
|---|---|
| pk | commitment to sk |
| C | $hash(pk_x |
| $cm^{value}$ | commitment to value |
leadership mint proof
$$ X = $$ $$ W = $$ $$ \mathcal{L}= {X:W\in \mathcal{R}} $$
| Public Input | Description |
|---|---|
| ep | epoch index |
| C | coin commitment |
| $cm_x^{value}$ | value commitment affine x coordinate |
| $cm_y^{value}$ | value commitment affine y coordinate |
| Witnesses | Description |
|---|---|
| $pk_x$ | coin public key pk affine x coordinate |
| $pk_y$ | coin public key pk affine y coordinate |
| value | coin value $\in \mathbb{Z}$ or u64 |
| ep | epoch index |
| nonce | random nonce derived from previous coin |
| $value_{blind}$ | blinding scalar for value commitment |
| Functions | Description |
|---|---|
| pk | commitment to sk |
| C | $hash(pk_x |
| $cm^{value}$ | commitment to value |
leardership proof
$$ X = $$ $$ W = $$ $$ \mathcal{L}= {X:W\in \mathcal{R}} $$
| Public Input | Description |
|---|---|
| sn | nullifier is hash of nonce nonce, and sk |
| ep | epoch index |
| $pk_x$ | coin public key pk affine x coordinate |
| $pk_y$ | coin public key pk affine y coordinate |
| root | root of coins commitments tree |
| $cm_x^{value}$ | value commitment affine x coordinate |
| $cm_y^{value}$ | value commitment affine y coordinate |
| reward | lottery reward value $\in \mathbb{Z}$ of type u64 |
| $cm_x^{value^{out}}$ | value commitment affine x coordinate |
| $cm_y^{value^{out}}$ | value commitment affine y coordinate |
| $C^{out}$ | coin commitment |
| $\mu_y$ | random, deterministic PRF output |
| $\mu_{\rho}$ | random, deterministic PRF output |
| $\rho$ | on-chain entropy as hash of nonce, and $\mu_{\rho}$ |
| $\sigma_1$ | target function approximation first term coefficient |
| $\sigma_2$ | target function approximation second term coefficient |
| Witnesses | Description |
|---|---|
| sk | coin secret key derived from previous coin sk |
| nonce | random nonce derived from previous coin |
| value | coin value $\in \mathbb{Z}$ or u64 |
| ep | epoch index |
| reward | lottery reward value $\in \mathbb{Z}$ of type u64 |
| $value_{blind}$ | blinding scalar for value commitment |
| $\tau$ | C position rooted by root |
| path | path of C at position $\tau$ |
| $value_{blind}^{out}$ | blinding scalar for value commitment of newly minted coin |
| $\mu_y$ | random, deterministic PRF output |
| $\mu_{\rho}$ | random, deterministic PRF output |
| $\sigma_1$ | target function approximation first term coefficient |
| $\sigma_2$ | target function approximation second term coefficient |
| headstart | competitive advantage added to target T |
| Functions | Description |
|---|---|
| $value^{out}$ | value + reward |
| $nonce^{out}$ | $hash(sk |
| $sk^{out}$ | $hash(sk)$ |
| $pk^{out}$ | commitment to $sk^{out}$ |
| $C^{out}$ | $hash(pk_x^{out} |
| $cm^{value}$ | commitment to $value^{out}$ |