olalonde/blind-liability-proof — pull request #11 by zw (2014-03-12 15:44:02+00:00)
Title: Leaf node hashes: include balance, use separators.

Without the balance change (or similar), evil exchanges can cheat; see
.

Separators are mostly pedantic, depriving an evil exchange of only a very
tiny degree of freedom. Say you have:
* real user "olal", to whom you give nonce "onde1234"
* real user "olalonde", to whom you give nonce "1234"
* dummy user "olalon", to whom you give nonce "de1234"
Now you can make any two of these nodes siblings and tell a real user
that a node represents them when really it represents someone else
with a or nobody real at all.

This is less of a problem if balance is included, but separators still
stop confusion between pairs of users like:
* "olalonde99" with balance "9.0"
* "olalonde9" with balance "99.0"