Daira-Emma Hopwood

I propose that Sprout -> Orchard and Sapling -> Orchard migrations be done in separate transactions. This reduces information leakage to a party who is observing the block chain but...

Also see https://github.com/zcash/halo2/issues/181

Placeholder.

KaTeX is much faster to render, and is used successfully to render the [Halo2 book](https://zcash.github.io/halo2/) ([zcash/halo2](https://github.com/zcash/halo2)) and the [TFL book](https://electric-coin-company.github.io/tfl-book/) ([Electric-Coin-Company/tfl-book](https://github.com/Electric-Coin-Company/tfl-book)).

Orchard complicated this because in that case $\mathsf{GroupHash}^{\mathbb{G}^{(r)}}$ is correct.

[protocol spec] 4.17.2 (Spend statement): cm^old is not an auxiliary input

2

It's computed from other inputs.

[protocol spec] Make the security requirement on CRH^ivk more precise

1

We don't just need collision resistance, we also need pseudorandomness (i.e. suitability of the output as a Jubjub private scalar).

Give algorithms for abstG,S,J, and abstBytesEd25519. This originally affected sections 5.4.9.{1,2,3} and 5.4.6. (The QED-it report only mentions abstJ but this should be consistent across groups.) * [ ] $\mathsf{abst}_{\mathbb{G}}$...