Clarify transcripting for Clsag::verify, Mlsag::verify, as with Clsag::sign

This commit is contained in:
Luke Parker
2025-08-09 00:02:16 -04:00
parent 23f986f57a
commit ffa033d978
2 changed files with 8 additions and 0 deletions

View File

@@ -377,6 +377,10 @@ impl Clsag {
} }
/// Verify a CLSAG signature for the provided context. /// Verify a CLSAG signature for the provided context.
///
/// WARNING: This follows the Fiat-Shamir transcript format used by the Monero protocol, which
/// makes assumptions on what has already been transcripted and bound to within `msg_hash`. Do
/// not use this if you don't know what you're doing.
pub fn verify( pub fn verify(
&self, &self,
ring: &[[EdwardsPoint; 2]], ring: &[[EdwardsPoint; 2]],

View File

@@ -122,6 +122,10 @@ impl Mlsag {
} }
/// Verify a MLSAG. /// Verify a MLSAG.
///
/// WARNING: This follows the Fiat-Shamir transcript format used by the Monero protocol, which
/// makes assumptions on what has already been transcripted and bound to within `msg`. Do not use
/// this if you don't know what you're doing.
pub fn verify( pub fn verify(
&self, &self,
msg: &[u8; 32], msg: &[u8; 32],