[consensus] clip f value, pruned nonce_cm for lead coin, commented derived coins

This commit is contained in:
mohab metwally
2022-11-29 02:58:56 +02:00
parent 7b103f1bdf
commit d80d02ff04
5 changed files with 67 additions and 42 deletions

View File

@@ -34,9 +34,7 @@ circuit "Lead" {
# coin (1) pk
pk = poseidon_hash(PREFIX_PK, c1_sk_root, c1_tau, ZERO);
constrain_instance(pk);
# coin (2) rho/nonce
c2_rho = poseidon_hash(PREFIX_EVL, c1_sk_root, c1_rho, ZERO);
constrain_instance(pk);
# coin (1) cm/commitment
c1_cm_msg = poseidon_hash(PREFIX_CM, pk, value, c1_rho);
c1_cm_v = ec_mul_base(c1_cm_msg, NULLIFIER_K);
@@ -47,6 +45,8 @@ circuit "Lead" {
c1_cm_hash = poseidon_hash(c1_cm_x, c1_cm_y);
constrain_instance(c1_cm_x);
constrain_instance(c1_cm_y);
# coin (2) rho/nonce
c2_rho = poseidon_hash(PREFIX_EVL, c1_sk_root, c1_rho, ZERO);
# coin (2) cm/commitment
# reward
c2_value = base_add(value, REWARD);
@@ -83,7 +83,7 @@ circuit "Lead" {
term2 = base_mul(term2_1, value);
target = base_add(term1, term2);
#lottery
# constrain public value sigma1
#constrain public value sigma1
constrain_instance(sigma1);
# constrain public value sigma2
constrain_instance(sigma2);