Skip to content

Commit c791075

Browse files
committedDec 19, 2016
Specify a check on the order of pi_B in a zk-proof.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
1 parent dab5df9 commit c791075

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed
 

‎protocol/protocol.tex

+9-1
Original file line numberDiff line numberDiff line change
@@ -2719,7 +2719,9 @@
27192719
\item the lead byte is of the required form;
27202720
\item the remaining bytes encode a big-endian representation of an integer
27212721
in $\range{0}{q\!-\!1}$ or (in the case of $\Proof_B$) $\range{0}{q^2\!-\!1}$;
2722-
\item the encoding represents a point on the relevant curve.
2722+
\item the encoding represents a point on the relevant curve;
2723+
\item in the case of $\Proof_B$, that the point is of order $r$ (and hence in
2724+
the subgroup $\GroupG{2}$).
27232725
\end{itemize}
27242726

27252727
\nsubsection{\JoinSplitParameters} \label{jsparameters}
@@ -3679,6 +3681,12 @@
36793681

36803682
\nsection{Change history}
36813683

3684+
\subparagraph{2016.0-beta-1.11}
3685+
3686+
\begin{itemize}
3687+
\item Specify a check on the order of $\Proof_B$ in a \zeroKnowledgeProof.
3688+
\end{itemize}
3689+
36823690
\subparagraph{2016.0-beta-1.10}
36833691

36843692
\begin{itemize}

0 commit comments

Comments
 (0)
Please sign in to comment.