m
is derived as follows:Hs
is a Keccak-256 hash function interpreted as integer and modulo l
(maximum edwards25519 scalar)||
is a byte array concatenation operatorSubAddr
is a 0-terminated fixed string (8 bytes total)a
is a private view key of the main address (a 32 byte little endian unsigned integer)account_index
is index of an account (a 32 bit little endian unsigned integer)subaddress_index_within_account
is index of the subaddress within the account (a 32 bit little endian unsigned integer)D
is derived as follows:B
is main address public spend keym
is subaddress private view keyG
is the "base point"; this is simply a constant specific to edwards25519C
is derived as follows:a
is a private view key of the main addressD
is a public spend key of the subaddressif
statement.