[protocol spec] [ZIP 216] Sapling pk_d should not allow the zero point #664
Labels
Implementation/spec conflict
protocol spec
Sapling
Interacts with Sapling design, spec, or implementation
ZIP bug
Milestone
The implementation does not allow$\mathcal{O}_{\mathbb{J}}$ for $\mathsf{pk_d}$ (originally implemented here).
Also see zcash/zcash#3827 (comment).
The text was updated successfully, but these errors were encountered: