Skip to content

ZIP 244, ZIP 246: Disambiguate scope of BLAKE2b-256 over per-input data. #1291

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
nuttycom wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

ZIP 244, ZIP 246: Disambiguate scope of BLAKE2b-256 over per-input data. #1291

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 9 additions & 7 deletions zips/zip-0244.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -688,8 +688,8 @@ The personalization field of this hash is set to::
A.1: transparent_scripts_digest
```````````````````````````````
In the case that the transaction contains transparent inputs, this is a BLAKE2b-256 hash
of the field encoding of the concatenated values of the Bitcoin script values associated
with each transparent input belonging to the transaction.
of the concatenation of the field encoding of the Bitcoin script value associated with
each transparent input belonging to the transaction, in transaction order.

The personalization field of this hash is set to::

Expand All @@ -702,11 +702,13 @@ In the case that the transaction has no transparent inputs, ``transparent_script
A.2: sapling_auth_digest
````````````````````````
In the case that Sapling Spends or Sapling Outputs are present, this is a BLAKE2b-256 hash
of the field encoding of the Sapling ``zkproof`` value of each Sapling Spend Description,
followed by the field encoding of the ``spend_auth_sig`` value of each Sapling Spend
Description belonging to the transaction, followed by the field encoding of the
``zkproof`` field of each Sapling Output Description belonging to the transaction,
followed by the field encoding of the binding signature::
of the concatenation of the field encoding of the Sapling ``zkproof`` value for each
Sapling Spend Description belonging to the transaction in transaction order, followed by
the concatenation of the field encoding of the ``spend_auth_sig`` value for each Sapling
Spend Description belonging to the transaction in transaction order, followed by the
concatenation of the field encoding of the ``zkproof`` field for each Sapling Output
Description belonging to the transaction in transaction order, followed by the field
encoding of the binding signature::

A.2a: spend_zkproofs (field encoding bytes)
A.2b: spend_auth_sigs (field encoding bytes)
Expand Down
2 changes: 1 addition & 1 deletion zips/zip-0246.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -529,7 +529,7 @@ Note that while the structure of ``sapling_auth_digest`` remains the same as in
A.1: transparent_auth_digest
````````````````````````````

In the case that the transaction contains transparent inputs, this is a BLAKE2b-256 hash of the following values for each transparent input::
In the case that the transaction contains transparent inputs, this is a BLAKE2b-256 hash of the concatenation of the field encoding of the ``TransparentSighashInfo`` value for each transparent input in transaction order, followed by the concatenation of the field encoding of the Bitcoin ``scriptSig`` value for each transparent input in transaction order::

A.1a: TransparentSighashInfo (field encoding bytes)
A.1b: scriptSig (field encoding bytes)
Expand Down
Loading