{"action":"closed","issue":{"url":"https://api.github.com/repos/zcash/zcash/issues/1096","repository_url":"https://api.github.com/repos/zcash/zcash","labels_url":"https://api.github.com/repos/zcash/zcash/issues/1096/labels{/name}","comments_url":"https://api.github.com/repos/zcash/zcash/issues/1096/comments","events_url":"https://api.github.com/repos/zcash/zcash/issues/1096/events","html_url":"https://github.com/zcash/zcash/issues/1096","id":165224657,"number":1096,"title":"Document that zcrawreceive doesn't check correctness of note commitments","user":{"login":"defuse","id":4211072,"avatar_url":"https://avatars.githubusercontent.com/u/4211072?v=3","gravatar_id":"","url":"https://api.github.com/users/defuse","html_url":"https://github.com/defuse","followers_url":"https://api.github.com/users/defuse/followers","following_url":"https://api.github.com/users/defuse/following{/other_user}","gists_url":"https://api.github.com/users/defuse/gists{/gist_id}","starred_url":"https://api.github.com/users/defuse/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/defuse/subscriptions","organizations_url":"https://api.github.com/users/defuse/orgs","repos_url":"https://api.github.com/users/defuse/repos","events_url":"https://api.github.com/users/defuse/events{/privacy}","received_events_url":"https://api.github.com/users/defuse/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/zcash/zcash/labels/documentation","name":"documentation","color":"906b75"},{"url":"https://api.github.com/repos/zcash/zcash/labels/RPC%20interface","name":"RPC interface","color":"ffd0b7"},{"url":"https://api.github.com/repos/zcash/zcash/labels/SECURITY","name":"SECURITY","color":"e01010"},{"url":"https://api.github.com/repos/zcash/zcash/labels/wontfix","name":"wontfix","color":"ffffff"}],"state":"closed","locked":false,"assignee":{"login":"nathan-at-least","id":4369700,"avatar_url":"https://avatars.githubusercontent.com/u/4369700?v=3","gravatar_id":"","url":"https://api.github.com/users/nathan-at-least","html_url":"https://github.com/nathan-at-least","followers_url":"https://api.github.com/users/nathan-at-least/followers","following_url":"https://api.github.com/users/nathan-at-least/following{/other_user}","gists_url":"https://api.github.com/users/nathan-at-least/gists{/gist_id}","starred_url":"https://api.github.com/users/nathan-at-least/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nathan-at-least/subscriptions","organizations_url":"https://api.github.com/users/nathan-at-least/orgs","repos_url":"https://api.github.com/users/nathan-at-least/repos","events_url":"https://api.github.com/users/nathan-at-least/events{/privacy}","received_events_url":"https://api.github.com/users/nathan-at-least/received_events","type":"User","site_admin":false},"assignees":[{"login":"nathan-at-least","id":4369700,"avatar_url":"https://avatars.githubusercontent.com/u/4369700?v=3","gravatar_id":"","url":"https://api.github.com/users/nathan-at-least","html_url":"https://github.com/nathan-at-least","followers_url":"https://api.github.com/users/nathan-at-least/followers","following_url":"https://api.github.com/users/nathan-at-least/following{/other_user}","gists_url":"https://api.github.com/users/nathan-at-least/gists{/gist_id}","starred_url":"https://api.github.com/users/nathan-at-least/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nathan-at-least/subscriptions","organizations_url":"https://api.github.com/users/nathan-at-least/orgs","repos_url":"https://api.github.com/users/nathan-at-least/repos","events_url":"https://api.github.com/users/nathan-at-least/events{/privacy}","received_events_url":"https://api.github.com/users/nathan-at-least/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/zcash/zcash/milestones/36","html_url":"https://github.com/zcash/zcash/milestones/z8%20release%20-%20core%20(excl.%20RPC)%20audit%20freeze,%20functional%20PoW","labels_url":"https://api.github.com/repos/zcash/zcash/milestones/36/labels","id":1882158,"number":36,"title":"z8 release - core (excl. RPC) audit freeze, functional PoW","description":"","creator":{"login":"nathan-at-least","id":4369700,"avatar_url":"https://avatars.githubusercontent.com/u/4369700?v=3","gravatar_id":"","url":"https://api.github.com/users/nathan-at-least","html_url":"https://github.com/nathan-at-least","followers_url":"https://api.github.com/users/nathan-at-least/followers","following_url":"https://api.github.com/users/nathan-at-least/following{/other_user}","gists_url":"https://api.github.com/users/nathan-at-least/gists{/gist_id}","starred_url":"https://api.github.com/users/nathan-at-least/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nathan-at-least/subscriptions","organizations_url":"https://api.github.com/users/nathan-at-least/orgs","repos_url":"https://api.github.com/users/nathan-at-least/repos","events_url":"https://api.github.com/users/nathan-at-least/events{/privacy}","received_events_url":"https://api.github.com/users/nathan-at-least/received_events","type":"User","site_admin":false},"open_issues":17,"closed_issues":16,"state":"open","created_at":"2016-07-14T00:20:09Z","updated_at":"2016-08-03T22:46:08Z","due_on":"2016-08-03T07:00:00Z","closed_at":null},"comments":11,"created_at":"2016-07-13T02:44:36Z","updated_at":"2016-08-03T22:46:08Z","closed_at":"2016-08-03T22:46:08Z","body":"The current Zcash protocol spec says that decryption of a note by a recipient includes checking that the note commitment in the transaction was computed correctly. Our software doesn't do this, it just checks that the re-computed note commitment exists in the commitment set (which is similar, but not the same thing).\r\n\r\nThe zero-knowledge proof proves that the commitment was computed correctly, so why is it necessary for receivers do do this extra check?\r\n\r\nIf it is necessary, then is the way we re-compute the commitment and find *any* note commitment on the blockchain that matches it vulnerable to some attack?"}}
{"actor":{"display_login":"nathan-at-least"}}