hello good day,

i just finished translating zero to Monero from english to portuguese.

:)

i dont understand the most of the things of the 2nd part of ztm v2 .

so i guess i will force mzself to understand them so i can translate them and expose them verbatim...

so i started now with the transaction proofs...

(besides that all this was done in lyx and i guess i should somehow merge it to overleaf)

so when doing transaction proofs what is a domain separator?

(i am mucho more interested in randomx and bulletproofs, but i guess first things first)

slave_blocker: I'd say only ch8 is worth translating from the second part. Multisig is way outdated now, and txtangle is pretty impractical.

A domain separator is a string you append/prepend to a hash transcript (i.e. string of data to be hashed) so that the hash function behaves like a unique hash function. In practice it means if two separate use-cases of a hash function just so happen to hash the same data (e.g. elliptic curve point), then the output will be different.

oh i see

It's considered modern best practice to always domain separate uses of a hash function, even if there are no known attacks/problems that can arise.

Some people even go beyond that and embed the transcript serialization details in the hash data (e.g. vector lengths, etc.).

It's basically a salt.