Skip to content

Cite ZIP 215 for Ed25519 signature validation criteria #541

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gavofyork merged 2 commits into from
Aug 10, 2026
Merged

Cite ZIP 215 for Ed25519 signature validation criteria #541

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1334926
Cite ZIP 215 for Ed25519 signature validation criteria
philoniare Jul 25, 2026
3868a18
Update text/notation.tex
philoniare Jul 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions biblio.bib
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -342,4 +342,12 @@ @misc{bls12-381
title = {BLS12-381},
year = {2020},
url = {https://z.cash/technology/jubjub/}
}

@misc{zip215,
author = {Henry de Valence},
title = {{Explicitly Defining and Modifying Ed25519 Validation Rules}},
howpublished = {ZIP 215},
year = {2020},
url = {https://zips.z.cash/zip-0215}
}
2 changes: 1 addition & 1 deletion text/notation.tex
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -162,7 +162,7 @@ \subsubsection{Hashing}

\subsubsection{Signing Schemes}\label{sec:signing}

$\edsignature{k}{m \in \blob} \subset \blob[64]$ is the set of valid Ed25519 signatures, defined by \cite{rfc8032}, made through knowledge of a secret key whose public key counterpart is $k \in \hash$ and whose message is $m$. To aid readability, we denote the set of valid public keys $\edkey$.
$\edsignature{k}{m \in \blob} \subset \blob[64]$ is the set of valid Ed25519 signatures, defined by \cite{rfc8032}, made through knowledge of a secret key whose public key counterpart is $k \in \hash$ and whose message is $m$. To aid readability, we denote the set of valid public keys $\edkey$. Where \cite{rfc8032} admits alternative validation criteria, we adopt those of \cite{zip215}.

We denote the set of valid Bandersnatch public keys as $\bskey$, defined in appendix \ref{sec:bandersnatch}. $\bssignature{k \in \bskey}{x \in \blob}{m \in \blob} \subset \blob[96]$ is the set of valid singly-contextualized \textsc{vrf} signatures utilizing the secret counterpart to the public key $k$, some context $x$ and message $m$.

Expand Down