Safrole tickets context and Ring commitment

[davxy]

Notable:

• Ticket context is required to be equal to the primary sealing context,.
  • if not, the VRF output of the two signatures will be different (output is taken as the ticket-id in both cases and must match).
  • I've defined $X_T$ =$safrole_ticket_seal as the context to be used for both tickets generation and primary block sealing.
• Ring root used to verify is the KZG commitment of three polynomials constructed by interpolating the values in the three sequences: PKs.X, PKs.Y, RingSelector bits (a bitmask used internally by the scheme).
  • Details are intentionally omitted. There is an entire - dense - doc from Vasilyev describing the scheme.
  • The three polynomials committments size is 144 = 3*48.
  • Previous size (196608) was referring to the whole KZG SRS also used by the prover (but the verifier doesn't require it and in practice is a constant)