Glossary

Flat list of abbreviations and one-word terms used in the orchard crate. Each entry links to the file where the term is defined or the section of the spec that fixes its meaning.

Term	Meaning	Defined in
`ak`	Spend authorising public key $\mathsf{ak} = [\mathsf{ask}] \mathcal{G}_{\mathsf{ak}}$ .	`src/keys.rs`
`Anchor`	Root of the Sinsemilla-hashed Merkle tree of note commitments.	`src/tree.rs`
`ask`	Spend authorising secret scalar in $\mathbb{F}_q$ .	`src/keys.rs`
`bvk`	Binding-signature public key derived from the value commitments.	`src/value.rs`
`Bundle`	A list of Actions, the proof, the signatures, and `value_balance`.	`src/bundle.rs`
`cm`	Note commitment, a Sinsemilla commit on the note's canonical encoding.	`src/note/commitment.rs`
`cm*` / `ExtractedNoteCommitment`	$x$ -coordinate of the note commitment, inserted into the Merkle tree.	`src/note/commitment.rs`
`cv_net`	Per-Action net value commitment (Pedersen).	`src/value.rs`
`d`	88-bit diversifier, FF1-encrypted from a diversifier index.	`src/keys.rs`
`dk`	Diversifier key, AES-256 key for FF1.	`src/keys.rs`
`epk`	Ephemeral public key for one note's encryption.	`src/note_encryption.rs`
`esk`	Ephemeral secret scalar used by the sender.	`src/note_encryption.rs`
`FullViewingKey` / `FVK`	Triple $(\mathsf{ak}, \mathsf{nk}, \mathsf{rivk})$ .	`src/keys.rs`
`g_d`	Diversified base point $g_d = \mathsf{DiversifyHash}(d)$ .	`src/spec.rs`
`IncomingViewingKey` / `IVK`	Capability to detect incoming notes.	`src/keys.rs`
`ivk`	The $\mathbb{F}_q$ scalar that is the IVK.	`src/keys.rs`
`K` (Halo 2)	$2^K$ row count of the Action circuit table.	`src/circuit.rs`
`MerkleCRH`	Sinsemilla-based inner hash of the note commitment tree.	`src/tree.rs`
`nf`	Nullifier of a spent note.	`src/note/nullifier.rs`
`nk`	Nullifier deriving key, a `pallas::Base`.	`src/keys.rs`
`OrchardDomain`	Plug-in for `zcash_note_encryption`.	`src/note_encryption.rs`
`ovk`	Outgoing viewing key, derived from FVK.	`src/keys.rs`
`Pallas` / `Vesta`	The Pasta 2-cycle of curves.	`Cargo.toml` (`pasta_curves`)
`PCZT`	Partially constructed Zcash transaction, for split-role signing.	`src/pczt.rs`
`pk_d`	Diversified transmission key $\mathsf{pk_d} = [\mathsf{ivk}]\, g_d$ .	`src/address.rs`
`RandomSeed` / `rseed`	32-byte sender randomness deriving $\psi$ and $\mathsf{rcm}$ .	`src/note.rs`
`rcm`	Note commitment trapdoor in $\mathbb{F}_q$ .	`src/note/commitment.rs`
`rcv`	Value commitment trapdoor in $\mathbb{F}_q$ .	`src/value.rs`
`RedPallas`	RedDSA over Pallas.	`src/primitives/redpallas.rs`
`rho`	Nullifier seed (`pallas::Base`), chained from the previous nullifier.	`src/note.rs`
`rivk`	Randomness for the IVK Sinsemilla commit.	`src/keys.rs`
`rk`	Per-Action re-randomised spend authorising key.	`src/builder.rs`
`Sinsemilla`	Windowed Pedersen hash on Pallas.	`src/constants/sinsemilla.rs`
`SpendingKey` / `sk`	32-byte root secret.	`src/keys.rs`
`value_balance`	Signed net value entering / leaving the Orchard pool in a bundle.	`src/bundle.rs`
`ZIP 32`	Hardened-only derivation tree for Orchard keys.	`src/zip32.rs`
`ZIP 212`	Deterministic note randomness derivation (`rseed` -> `psi`, `rcm`).	`src/note_encryption.rs`
`ZIP 224`	Orchard activation ZIP.	`README.md`
`ZIP 244`	Transaction identifier digest, used as the SIGHASH for Action signatures.	`src/bundle/commitments.rs`
`ZIP 316`	Unified Address container format.	`src/address.rs`