leadership burn proof

proof of burn of staked coin.

$X = (s n, e p, p k_{x}, p k_{y}, roo t, c m_{x}^{v a l u e}, c m_{y}^{v a l u e})$ $W = (v a l u e, e p, n o n ce, v a l u e_{b l in d}, s k, τ, p a t h)$ $L = {X : W \in R}$

Public Input	Description
sn¹	nullifier is hash of nonce nonce, and sk
ep	epoch index
$p k_{x}$	coin public key pk affine x coordinate
$p k_{y}$	coin public key pk affine y coordinate
root	root of coins commitments tree
$c m_{x}^{v a l u e}$	value commitment affine x coordinate
$c m_{y}^{v a l u e}$	value commitment affine y coordinate

Witnesses	Description
value	coin value $\in Z$ or u64
ep	epoch index
nonce²	random nonce derived from previous coin
$v a l u e_{b l in d}$	blinding scalar for value commitment
sk	coin secret key
$τ$	C position rooted by root
path	path of C at position $τ$

Functions	Description
pk	commitment to sk
C	$ha s h (p k_{x} ∣∣ p k_{y} ∣∣ v a l u e ∣∣ e p ∣ n o n ce)$
$c m^{v a l u e}$	commitment to value

if you read this after zerocash which crypsinous is based off, both papers calls nullifiers serial numbers. and serial number is nonce, sn in the table below can be called nullifier in our contract using zcash sapling terminology which is used in our money contract (sapling contract). ²: if you read this after zerocash which crypsinous is based off, both papers calls nullifiers serial numbers. and serial number is nonce, nonce can be called input/output serial in our contracts using zcash sapling terminology which is used in our money contract (sapling contract).

The DarkFi Book

leadership burn proof