typo: PRF takes input 1 (not 0) when deriving nk

penumbra-zone · Jan 12, 2024 · 08c66e5 · 08c66e5
1 parent 5adb302
commit 08c66e5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/protocol/src/protocol/addresses_keys/spend_key.md b/docs/protocol/src/protocol/addresses_keys/spend_key.md
@@ -55,7 +55,7 @@ personalization `label`, key `key`, and input `input`.  Define
 integer in little-endian order.  Then
 ```
 ask = from_le_bytes(prf_expand("Penumbra_ExpndSd", spend_key_bytes, 0)) mod r
-nk  = from_le_bytes(prf_expand("Penumbra_ExpndSd", spend_key_bytes, 0)) mod q
+nk  = from_le_bytes(prf_expand("Penumbra_ExpndSd", spend_key_bytes, 1)) mod q
 ```
 
 The *spending key* consists of `spend_key_bytes` and `ask`.  (Since `ask` is