We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent dbe6283 commit 518522eCopy full SHA for 518522e
1 file changed
xx.md
@@ -65,10 +65,10 @@ Each proof adds a single new metadata field:
65
66
1. Generate a fresh random scalar `e` and compute `E = e·G`.
67
2. For each receiver key `P`, compute:
68
- a. Slot index `i` in `[data, ...pubkeys, ...refund]`
69
- a. `Zx = x(e·P)`.
70
- b. `rᵢ = H("Cashu_P2BK_v1" || Zx || keyset_id || i) mod n`.
71
- c. `P′ = P + rᵢ·G`.
+ > a. Slot index `i` in `[data, ...pubkeys, ...refund]` \
+ > b. `Zx = x(e·P)` \
+ > c. `rᵢ = H("Cashu_P2BK_v1" || Zx || keyset_id || i) mod n`\
+ > d. `P′ = P + rᵢ·G`
72
3. Build the canonical P2PK secret with the blinded `P′` keys in their slots.
73
4. Interact with the mint normally; the mint never learns `P` or `rᵢ`.
74
5. Include `p2pk_e = E` in the final proof.
0 commit comments