stealth: d is not involved in the receiver private key

This commit is contained in:
Daniel Cousens 2016-12-10 14:33:51 +11:00 committed by Daniel Cousens
parent b4062d56d1
commit 6f47bc4d70

View file

@ -37,30 +37,30 @@ function stealthRecoverLeaked (v, e, Q) {
return d
}
// vG = (rG * (dG * sha256(e * dG)G))
// vG = (rG * sha256(e * dG)G)
function stealthDualSend (e, R, Q) {
var eQ = Q.multiply(e) // shared secret
var c = bigi.fromBuffer(bitcoin.crypto.sha256(eQ.getEncoded()))
var cG = G.multiply(c)
var vG = new bitcoin.ECPair(null, R.add(Q.add(cG)))
var vG = new bitcoin.ECPair(null, R.add(cG))
return vG
}
// vG = (rG * (d + sha256(eG * d))G)
// vG = (rG * sha256(eG * d)G)
function stealthDualScan (d, R, eG) {
var eQ = eG.multiply(d) // shared secret
var c = bigi.fromBuffer(bitcoin.crypto.sha256(eQ.getEncoded()))
var vG = new bitcoin.ECPair(null, R.add(G.multiply(d.add(c).mod(n))))
var vG = new bitcoin.ECPair(null, R.add(G.multiply(c)))
return vG
}
// v = (r + d + sha256(eG * d))
// v = (r + sha256(eG * d))
function stealthDualReceive (d, r, eG) {
var eQ = eG.multiply(d) // shared secret
var c = bigi.fromBuffer(bitcoin.crypto.sha256(eQ.getEncoded()))
var v = new bitcoin.ECPair(r.add(d).add(c).mod(n))
var v = new bitcoin.ECPair(r.add(c).mod(n))
return v
}