CLSAG Rules

Introduction

These rules apply to all ringCT types that use CLSAG signatures.

Rules

Number Of CLSAGs

There must be the same number of CLSAG signatures as there are inputs.¹

s Size

The s field must have has many elements as the amount of ring members.²

Canonical Encoding

All s scalars must be fully reduced, the c1 scalar must be fully reduced³ and the D point must be canonically encoded.⁴

Key Images Not Identity

The key image and 8 * D, the commitment key image, must both not be the identity point.⁵

The CLSAG Signature Must Be Correctly Formed

The signature must be valid.⁶