Seraphis

Seraphis copied to clipboard

Binding the onetime address key extensions to the address spendkey is a red herring

4

In appendix A.3 *Enote Ownership Proof*, the implementation paper states "Here we see that binding ko[g/x/u] to K allows enote ownership proofs to demonstrate a relationship between K and Ko."...

jeffro256

Discussion: A Report on Seraphis

6

@coinstudent2048 Feedback for [A Report on Seraphis](https://raw.githubusercontent.com/coinstudent2048/writeups/main/seraphis.pdf). - 1.1 - Generators in `{G_0, G_1}` can overlap with `{H_0, H_1}`. It's only _within_ the sets that unknown DL relation is necessary....

UkoeHB

Impl clarification: burning bug not prevented by `xK_e` uniqueness when using shared `xK_e`

6

In section 8.2.2 of Implementing Seraphis, "Secret uniqueness: `input_context`", the paper states "To further ensure uniqueness *within* a transaction, transaction verifiers must mandate that all values `xK_e` in a transaction...

jeffro256

Discussion: Formalizing the Privacy Matrix for Security Analysis

28

We need to have a formalized version of the privacy matrix (pp. 3-4) for security analysis. So far, it is informal. For now, I don't know how to do this...

coinstudent2048

Discussion: linking tag uniqueness

8

coinstudent2048