search

zcash / zips

Zcash Improvement Proposals
https://zips.z.cash
MIT License
273 stars 156 forks source link

Use a different later than plain G for the jubjub prime subgroup #148

Closed arielgabizon closed 6 years ago

arielgabizon commented 6 years ago

In particular, there's a clash cause plain G is uses for an element of a generic group, and in any case the importance of this group justifies something else.

arielgabizon commented 6 years ago

In this context, if the Pedersen hashes are always supposed to be with prime subgroup inputs/outputs, I would use this new letter for the domains/ranges rather than \mathbb{J} for the whole group.

arielgabizon commented 6 years ago

Also, recommend to use this letter in superscript of FindGroupHash & GroupHash instead of \mathbb{J} to clarify output is in subgroup

daira commented 6 years ago

Fixed in 2018.0-beta-21.