commit c6cd0e0690e160742cdb2b7e85bd755d9b2db84c
parent e1ba021572d369115faebcbc03911e10bff6cbb2
Author: Mikolai Gütschow <mikolai.guetschow@tu-dresden.de>
Date: Thu, 18 Jun 2026 11:31:26 +0200
refresh: fix commitment calculation
Diffstat:
3 files changed, 687 insertions(+), 687 deletions(-)
diff --git a/draft-guetschow-taler-protocol.md b/draft-guetschow-taler-protocol.md
@@ -1213,8 +1213,8 @@ for k in 0..κ:
(coinₖᵢ, blind_secretₖᵢ, planchetₖᵢ, h_planchetₖᵢ) = Refresh-Derive(sharedₖᵢ, denomᵢ)
h_planchetsₖ = SHA-512( ⟨h_planchetₖᵢ⟩ )
value = coin.denom.fee_refresh + Sum ⟨denomᵢ.value⟩ + Sum ⟨denomᵢ.fee_withdraw⟩
-commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub | value
- | SHA-512( ⟨h_planchetsₖ⟩ ) )
+commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub
+ | value | ⟨h_planchetsₖ⟩ )
for i in 0..n:
h_denomᵢ = Hash-Denom(denomᵢ)
planchets = (⟨h_denomᵢ⟩, ⟨planchetₖᵢ⟩, ⟨transferₖᵢ.pub⟩))
@@ -1250,8 +1250,8 @@ for k in 0..κ:
for i in 0..n:
h_planchetₖᵢ = Hash-Planchet(planchetₖᵢ, denomᵢ)
h_planchetsₖ = SHA-512( ⟨h_planchetₖᵢ⟩ )
-commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub | value
- | SHA-512( ⟨h_planchetsₖ⟩ ) )
+commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub
+ | value | ⟨h_planchetsₖ⟩ )
msg = Gen-Msg(WALLET_COIN_MELT,
( commitment | coin.h_denom | uint256(0x0)
| value | denom.fee_refresh ))
@@ -1310,8 +1310,8 @@ for k in 0..κ and k != ɣ:
(_, _, _, h_planchetₖᵢ) = Refresh-Derive(sharedₖᵢ, denomᵢ)
h_planchetsₖ = SHA-512( ⟨h_planchetₖᵢ⟩ )
value = coin.denom.fee_refresh + Sum ⟨denomᵢ.value⟩ + Sum ⟨denomᵢ.fee_withdraw⟩
-commitment' = SHA-512( refresh_seed | uint256(0x0) | coin.pub | value
- | SHA-512( ⟨h_planchetsₖ⟩ ) )
+commitment' = SHA-512( refresh_seed | uint256(0x0) | coin.pub
+ | value | ⟨h_planchetsₖ⟩ )
Check commitment == commitment'
Persist refresh_record = (_, _, _, true, _)
~~~
@@ -1412,8 +1412,8 @@ for k in 0..κ:
(coinₖᵢ, blind_secretₖᵢ _, h_planchetₖᵢ) = Refresh-Derive(sharedₖᵢ, denomᵢ)
h_planchetsₖ = SHA-512( ⟨h_planchetₖᵢ⟩ )
value = coin.denom.fee_refresh + Sum ⟨denomᵢ.value⟩ + Sum ⟨denomᵢ.fee_withdraw⟩
-commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub | value
- | SHA-512( ⟨h_planchetsₖ⟩ ) )
+commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub
+ | value | ⟨h_planchetsₖ⟩ )
msg = Gen-Msg(WALLET_COIN_MELT,
( commitment | coin.h_denom | uint256(0x0)
| value | denom.fee_refresh ))
diff --git a/draft-guetschow-taler-protocol.xml b/draft-guetschow-taler-protocol.xml
@@ -1127,8 +1127,8 @@ for k in 0..κ:
(coinₖᵢ, blind_secretₖᵢ, planchetₖᵢ, h_planchetₖᵢ) = Refresh-Derive(sharedₖᵢ, denomᵢ)
h_planchetsₖ = SHA-512( ⟨h_planchetₖᵢ⟩ )
value = coin.denom.fee_refresh + Sum ⟨denomᵢ.value⟩ + Sum ⟨denomᵢ.fee_withdraw⟩
-commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub | value
- | SHA-512( ⟨h_planchetsₖ⟩ ) )
+commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub
+ | value | ⟨h_planchetsₖ⟩ )
for i in 0..n:
h_denomᵢ = Hash-Denom(denomᵢ)
planchets = (⟨h_denomᵢ⟩, ⟨planchetₖᵢ⟩, ⟨transferₖᵢ.pub⟩))
@@ -1156,8 +1156,8 @@ for k in 0..κ:
for i in 0..n:
h_planchetₖᵢ = Hash-Planchet(planchetₖᵢ, denomᵢ)
h_planchetsₖ = SHA-512( ⟨h_planchetₖᵢ⟩ )
-commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub | value
- | SHA-512( ⟨h_planchetsₖ⟩ ) )
+commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub
+ | value | ⟨h_planchetsₖ⟩ )
msg = Gen-Msg(WALLET_COIN_MELT,
( commitment | coin.h_denom | uint256(0x0)
| value | denom.fee_refresh ))
@@ -1199,8 +1199,8 @@ for k in 0..κ and k != ɣ:
(_, _, _, h_planchetₖᵢ) = Refresh-Derive(sharedₖᵢ, denomᵢ)
h_planchetsₖ = SHA-512( ⟨h_planchetₖᵢ⟩ )
value = coin.denom.fee_refresh + Sum ⟨denomᵢ.value⟩ + Sum ⟨denomᵢ.fee_withdraw⟩
-commitment' = SHA-512( refresh_seed | uint256(0x0) | coin.pub | value
- | SHA-512( ⟨h_planchetsₖ⟩ ) )
+commitment' = SHA-512( refresh_seed | uint256(0x0) | coin.pub
+ | value | ⟨h_planchetsₖ⟩ )
Check commitment == commitment'
Persist refresh_record = (_, _, _, true, _)
]]></sourcecode>
@@ -1272,8 +1272,8 @@ for k in 0..κ:
(coinₖᵢ, blind_secretₖᵢ _, h_planchetₖᵢ) = Refresh-Derive(sharedₖᵢ, denomᵢ)
h_planchetsₖ = SHA-512( ⟨h_planchetₖᵢ⟩ )
value = coin.denom.fee_refresh + Sum ⟨denomᵢ.value⟩ + Sum ⟨denomᵢ.fee_withdraw⟩
-commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub | value
- | SHA-512( ⟨h_planchetsₖ⟩ ) )
+commitment = SHA-512( refresh_seed | uint256(0x0) | coin.pub
+ | value | ⟨h_planchetsₖ⟩ )
msg = Gen-Msg(WALLET_COIN_MELT,
( commitment | coin.h_denom | uint256(0x0)
| value | denom.fee_refresh ))
@@ -2074,13 +2074,13 @@ for k = 2:
h_planchetsₖ = 802838537720786bbe61a0752397056c3a7f7bc332a54d
c5a649452a9a74fef79c2c59deaf1e03cf73f85f241f28
61a50f2f859d95c3c660ab5e57b448526036
-value = KUDOS:0.25
-commitment = ba2a18eb9cc878b20dde4679910aede08b37b58e47df25
- 2a245598e0671ed6fc012c9cc245d13f9759d777d80d51
- d4a29bcdba486109d83075b8bf47fc518928
-sig = 62ce04a6a6dd6b3f50792e34b51ccc10d2552425800566
- 90248790f6280db11f6f29753f601f19e8504ea378574a
- dec5b1fc6f5509f3ec79af3110bb4cd4670a
+value = KUDOS:0.27
+commitment = 2bce7a8fc6d5ad50b648c15ff1e5967c2491bfde09c7f0
+ 465026f6603bb42e4723e8e601a0004989d8676f205f6e
+ 3f8da392830cdfa77c47a342db4eaed2ec2a
+sig = 43b9734d2547872fcad7c40d151f5a4557be026b5058c3
+ 74a434be7b7e0be110cd7ad27f01ed33ab0c335f3d135e
+ c9b3abb47a761e0640ac272b6ce8b032ff0b
]]></sourcecode>
<sourcecode type="pseudocode"><![CDATA[
(E1) gamma selection and coin signing (exchange)
@@ -2110,9 +2110,9 @@ blind_sig₁ = 9c10e5b88fe3563bdaba5934447baad4d05e66a9075102
3cf774ad1dd8f5b0a0fe218ac78b37c4435e4f5616c2fd
96dba36f3c7c1973835fe53c95839ed11c792ad011c9fb
1ce55c
-sig = 6eb68d755e7e554ade9f9f21e3a04b83a74753ec136f98
- 981ec2369d0fd56f88c274fe44482f425f1142a447627b
- 71e2117d9991d89dfbf97441b881963a360a
+sig = 4ac44b89d7e2b0d117c9ffbbfa883db10b551f10b47123
+ bf69af42fe8544fbd90efb7d52b649f47d69e0f89ee9ef
+ 10f3b7a3c35eddaecb58243171dbcafc4801
]]></sourcecode>
<sourcecode type="pseudocode"><