Skip to content

Conversation

@vivek-arte
Copy link

This PR goes through ZIP 228, and makes changes to reconcile the ZIP with the updates made in ZIP 226, ZIP 227, ZIP 230 and ZIP 246, for the NU7 protocol upgrade

@netlify
Copy link

netlify bot commented Nov 15, 2025

Deploy Preview for zcash-zips-qedit ready!

Name Link
🔨 Latest commit 4a3f11c
🔍 Latest deploy log https://app.netlify.com/projects/zcash-zips-qedit/deploys/691f663f51c8c300089450d0
😎 Deploy Preview https://deploy-preview-128--zcash-zips-qedit.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Copy link

@PaulLaux PaulLaux left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good work. Minor comments


We protect against the malleation of the ``timeLimit`` field by a malicious matching party by including the time limit inside the Action Group Hash that is signed using the Spend Authorization Signature (see more details in `Rationale for Time Limit`_).
The security of the Spend Authorization Signature and the collision resistance of the BLAKE2b-256 hash then ensures that the time limit remains the same as the one mandated by the creator of the Swap Order.
We protect against the malleation of the ``nAGExpiryHeight`` field by a malicious matching party by including the expiry height inside the Action Group Hash that is signed using the Spend Authorization Signature (see more details in `Rationale for Expiry Height`_).

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is it actually done for ZSA?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I noticed there is a change needed in the sentence though, need to replace Action Group Hash with v1 Signature Digest. Made this change

@vivek-arte vivek-arte merged commit 65e446b into asset_swaps Nov 20, 2025
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants