1
0
mirror of https://github.com/bitcoin/bips.git synced 2026-10-19 19:29:18 +00:00

bip-138 saturate the decoy bucket at the count limit

This commit is contained in:
pythcoiner
2026-07-15 02:32:55 -04:00
parent ea221577df
commit 1a157a6418

View File

@@ -285,7 +285,9 @@ parsing.
Encoders SHOULD append random decoy `INDIVIDUAL_SECRET` entries to hide the exact
number of real decryption keys. The total count SHOULD be rounded up to the
smallest bucket greater than or equal to the real count, starting at 5 and doubling
for each following bucket: 5, 10, 20, and so on. Decoders do not distinguish real
for each following bucket: 5, 10, 20, and so on. The bucket sequence saturates at
the 255 `COUNT` limit: when the smallest fitting bucket would exceed 255, encoders
SHOULD pad to 255 instead. Decoders do not distinguish real
entries from decoys; they try each entry until one decrypts the payload.
#### Encryption