Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding a ptx type flag to solve the potential information leakage when allowing the shielded and transparent mixing #161

Open
XuyangSong opened this issue May 8, 2023 · 0 comments

Comments

@XuyangSong
Copy link
Collaborator

Problem: when allowing the shielded and transparent mixing, a transparent partial transaction could consume the shielded notes(intents). The private information of shielded notes(intents) could be deduced from the transparent ptx since they are balanced finally. And the owner of shielded notes(intents) can not perceive how the ptx will be matched and the potential information leakage.

Exposing some private information is unavoidable in the face of shielded and transparent interaction. But the decision should be made by the user(owner), not the ptx matcher(solver).

Solution: Adding a type flag in the partial transaction to specify whether the ptx is shielded or transparent.
The flag could be constrained in the predicate if needed and be checked publicly out of the predicate.
This way, the owner could explicitly prevent the shielded notes(intents) from being consumed by transparent partial transactions. Without explicit constraints on the flag, a transparent partial transaction could consume the shielded notes(intents) by default.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant