aljaz/nutshell
1
0
Fork 0
mirror of https://github.com/aljazceru/nutshell.git synced 2025-12-22 19:34:18 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix format

Browse Source
This commit is contained in:
callebtc
2023-01-14 20:21:55 +01:00
parent 75bbf12679
commit e05a8313b4
1 changed files with 11 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
docs/specs/00.md
View File

@@ -5,24 +5,27 @@ Receiving user: `Carol`
Mint: `Bob` Mint: `Bob`
## Bob (mint) ## Bob (mint)
- `k` private key of mint (one for each amount) - `k` private key of mint (one for each amount)
- `K` public key of mint - `K` public key of mint
- `Q` promise (blinded signature) - `Q` promise (blinded signature)
## Alice (user) ## Alice (user)
- `x` random string (secret message), corresponds to point `Y` on curve - `x` random string (secret message), corresponds to point `Y` on curve
- `r` private key (blinding factor) - `r` private key (blinding factor)
- `T` blinded message - `T` blinded message
- `Z` proof (unblinded signature) - `Z` proof (unblinded signature)
# Blind Diffie-Hellmann key exchange (BDHKE) # Blind Diffie-Hellmann key exchange (BDHKE)
- Mint `Bob` publishes `K = kG`
- `Alice` picks secret `x` and computes `Y = hash_to_curve(x)` - Mint `Bob` publishes `K = kG`
- `Alice` sends to `Bob`: `T = Y + rG` with `r` being a random nonce - `Alice` picks secret `x` and computes `Y = hash_to_curve(x)`
- `Bob` sends back to `Alice` blinded key: `Q = kT` (these two steps are the DH key exchange) - `Alice` sends to `Bob`: `T = Y + rG` with `r` being a random nonce
- `Alice` can calculate the unblinded key as `Q - rK = kY + krG - krG = kY = Z` - `Bob` sends back to `Alice` blinded key: `Q = kT` (these two steps are the DH key exchange)
- Alice can take the pair `(x, Z)` as a token and can send it to `Carol`. - `Alice` can calculate the unblinded key as `Q - rK = kY + krG - krG = kY = Z`
- `Carol` can send `(x, Z)` to `Bob` who then checks that `k*hash_to_curve(x) == Z`, and if so treats it as a valid spend of a token, adding `x` to the list of spent secrets. - Alice can take the pair `(x, Z)` as a token and can send it to `Carol`.
- `Carol` can send `(x, Z)` to `Bob` who then checks that `k*hash_to_curve(x) == Z`, and if so treats it as a valid spend of a token, adding `x` to the list of spent secrets.
## 0.1 - Models ## 0.1 - Models
@@ -99,6 +102,7 @@ This token format is a list of `Proof`s. Each `Proof` contains the keyset id in
"secret": "d_PPc5KpuAB2M60WYAW5-Q", "secret": "d_PPc5KpuAB2M60WYAW5-Q",
"C": "0270e0a37f7a0b21eab43af751dd3c03f61f04c626c0448f603f1d1f5ae5a7d7e6" "C": "0270e0a37f7a0b21eab43af751dd3c03f61f04c626c0448f603f1d1f5ae5a7d7e6"
} }
]
``` ```
When serialized, this becomes: When serialized, this becomes: