by cgrand (🦋 🦣 𝕏) As Clojure developers we love the simplicity of putting almost all application state under a single atom. You get isolation (as long as you...

The Transactor Volume 4, Issue 05 (1983)

Automated test coverage for the Confidential Transfer feature (XLS-0096), grouped by the transactor, invariant, or cross-feature interaction each test exercises with 561 tests. Category | Test Count ---|--- Transactor — Convert | 72 Transactor — Send | 69 Transactor — MergeInbox | 31 Transactor — ConvertBack | 30 Transactor — Clawback | 30 Issuance Lifecycle | 41 Crypto | 44 Hardening | 36 Adversarial / Security | 45 Invariants | 41 Batch / Composition | 18 Delegation | 12 Cross-Feature | 63 Bug Hunt | 29 **Total** | **561** ## Transactor — Convert 1. Test Confidential MPT convert basic 2. Test Confidential MPT convert without tfMPTCanPrivacy flag 3. Test Confidential MPT convert partial amount 4. Test Confidential MPT convert multiple times with available balance 5. Test Confidential MPT convert multiple times without ignoring holder elgamal public key 6. Test Confidential MPT convert multiple times with insufficient balance 7. Test Confidential MPT convert account is individual account locked 8. Test Confidential MPT convert account is globally locked 9. Test Confidential MPT convert with auditor enabled and auditor encrypted amount 10. Test Confidential MPT convert with auditor same as issuer 11. Test Confidential MPT convert with auditor enabled separately after issuer 12. Test Confidential MPT convert with different issuer elgamal public key 13. Test Confidential MPT convert holder and issuer encrypted amounts different 14. Test Confidential MPT convert with auditor enabled but no auditor encrypted amount 15. Test Confidential MPT convert with auditor not enabled but with auditor encrypted amount 16. Test Confidential MPT convert with auditor enabled and using issuer for auditor encrypted amount 17. Test Confidential MPT convert with auditor enabled and using holder for auditor encrypted amount 18. Test Confidential MPT convert with no issuer elgamal public key 19. Test Confidential MPT convert set privacy flag and issuer elgamal public key separately after MPT Issuance create 20. Test Confidential MPT convert set privacy flag and issuer elgamal public key in same transaction after MPT Issuance create 21. Test Confidential MPT convert existing account set privacy flag when oa greater than zero 22. Test Confidential MPT convert new account after set privacy flag when oa greater than zero 23. Test Confidential MPT convert set privacy flag when oa equals zero 24. Test Confidential MPT convert set privacy flag by holder when oa greater than zero 25. Test Confidential MPT convert set privacy flag by holder when oa equals zero 26. Test Confidential MPT convert with cannot mutate privacy flag 27. Test Confidential MPT convert with cannot mutate privacy flag and set privacy flag 28. Test Confidential MPT convert with cannot mutate privacy flag and set privacy flag again 29. Test Confidential MPT convert holder without elgamal public key 30. Test Confidential MPT convert non existent account 31. Test Confidential MPT convert account with no MPT balance 32. Test Confidential MPT convert account with no MPT object 33. Test Confidential MPT convert with MPT lock flag set 34. Test Confidential MPT convert with can lock flag but not locked 35. Test Confidential MPT convert without tfMPTCanTransfer flag 36. Test Confidential MPT convert with clawback flag 37. Test Confidential MPT convert from issuer account 38. Test Confidential MPT convert from account who is another issuer 39. Test Confidential MPT convert zero amount account as issuer with balance 40. Test Confidential MPT convert zero amount account as issuer with no balance 41. Test Confidential MPT convert account as third party without MPT object 42. Test Confidential MPT convert MPT amount more than holder balance 43. Test Confidential MPT convert MPT amount in fraction 44. Test Confidential MPT convert MPT amount zero 45. Test Confidential MPT convert MPT amount negative 46. Test Confidential MPT convert negative MPT amount 47. Test Confidential MPT convert no holder encrypted amount 48. Test Confidential MPT convert no issuer encrypted amount 49. Test Confidential MPT convert no auditor encrypted amount when auditor set 50. Test Confidential MPT convert with auditor encrypted amount but auditor not set 51. Test Confidential MPT convert with receiver field 52. Test Confidential MPT convert with destination field 53. Test Confidential MPT convert with invalid MPT Issuance id 54. Test Confidential MPT convert MPT amount missing 55. Test Confidential MPT convert maximum amount 56. Test Confidential MPT convert auditor key mismatch 57. Test Confidential MPT convert invalid ciphertext format 58. Test Confidential MPT convert invalid zkp 59. Test Confidential MPT convert multiple accounts 60. Test Confidential MPT convert change auditor 61. Test Confidential MPT convert and delete holder 62. Test Confidential MPT convert with multisign with disabling master key 63. Test Confidential MPT convert with multisign without disabling master key 64. Test Confidential MPT convert minimum amount 65. Test Confidential MPT convert invalid elgamal key format 66. Test Confidential MPT convert elgamal key wrong length 67. Test Confidential MPT convert auditor encrypted amount encrypts wrong value 68. Test Confidential MPT convert issuer key rotation impact when coa is non zero 69. Test Confidential MPT convert issuer key rotation impact when coa is zero 70. Test Confidential MPT convert identity point elgamal key 71. Test Confidential MPT convert blinding factor wrong length 72. Test Confidential MPT convert zero amount on existing confidential balance ## Transactor — Send 1. Test Confidential MPT send to destination account basic 2. Test Confidential MPT send partial amount 3. Test Confidential MPT send multiple times 4. Test Confidential MPT send source destination swap 5. Test Confidential MPT send with one drop in inbox 6. Test Confidential MPT send without source account merging inbox 7. Test Confidential MPT send without bob having mptoken 8. Test Confidential MPT send with bob having zero mpt 9. Test Confidential MPT send with bob having nonzero MPT but no coa 10. Test Confidential MPT send to destination account having zero confidential balance 11. Test Confidential MPT send zero amount to bob 12. Test Confidential MPT send source confidential balance is zero after convert 13. Test Confidential MPT send to self 14. Test Confidential MPT send source does not exist 15. Test Confidential MPT send source does not have mptoken 16. Test Confidential MPT send source is locked 17. Test Confidential MPT send destination is nonexistent account 18. Test Confidential MPT send destination is locked 19. Test Confidential MPT send with globally locked 20. Test Confidential MPT send more than available coa 21. Test Confidential MPT send invalid MPT Issuance id 22. Test Confidential MPT send issuer sends to holder 23. Test Confidential MPT send holder sends to issuer 24. Test Confidential MPT send sender encrypted amount missing 25. Test Confidential MPT send sender encrypted amount invalid 26. Test Confidential MPT send destination encrypted amount missing 27. Test Confidential MPT send destination encrypted amount invalid 28. Test Confidential MPT send issuer encrypted amount missing 29. Test Confidential MPT send with auditor basic success 30. Test Confidential MPT send with auditor missing auditor encrypted amount 31. Test Confidential MPT send with auditor invalid auditor encrypted amount 32. Test Confidential MPT send without auditor but with auditor encrypted amount 33. Test Confidential MPT send without auditor unexpected auditor amount 34. Test Confidential MPT send with auditor verify decryption 35. Test Confidential MPT send with auditor multiple sends 36. Test Confidential MPT send from multiple accounts 37. Test Confidential MPT send with zkproof missing 38. Test Confidential MPT send with invalid zkproof value 39. Test Confidential MPT send with amount commitment missing 40. Test Confidential MPT send with invalid amount commitment value 41. Test Confidential MPT send with balance commitment missing 42. Test Confidential MPT send with invalid balance commitment value 43. Test Confidential MPT send multiple times in sequence 44. Test Confidential MPT send version increment 45. Test Confidential MPT send incorrect version 46. Test Confidential MPT send stale proof rejection 47. Test Confidential MPT send mismatched ciphertexts 48. Test Confidential MPT send and MPT Issuance destroy source account having zero confidential balance 49. Test Confidential MPT send and delete mptoken on destination account before merging inbox 50. Test Confidential MPT send second account as sender 51. Test Confidential MPT send to different accounts with same version 52. Test Confidential MPT send first merge after convert merge convert 53. Test Confidential MPT send with multisign without disabling master key 54. Test Confidential MPT send with multisign with disabling master key 55. Test Confidential MPT send with multisign insufficient signatures 56. Test Confidential MPT send with regular key master enabled 57. Test Confidential MPT send with regular key disabled master 58. Test Confidential MPT send fractional amount 59. Test Confidential MPT send negative amount 60. Test Confidential MPT send and public payment to same destination 61. Test Confidential MPT send and public payment to different destinations 62. Test Confidential MPT send without merge 63. Test Confidential MPT send with require auth and destination unauthorized 64. Test Confidential MPT send to destination with deposit auth 65. Test Confidential MPT send to destination with deposit auth and preauth 66. Test Confidential MPT send to destination requiring credential without providing 67. Test Confidential MPT send with nonexistent credential 68. Test Confidential MPT send with expired credential 69. Test Confidential MPT send without tfMPTCanTransfer flag ## Transactor — MergeInbox 1. Test Confidential MPT merge inbox basic 2. Test Confidential MPT merge inbox after partial convert 3. Test Confidential MPT merge inbox account does not exist 4. Test Confidential MPT merge inbox account does not have mptoken 5. Test Confidential MPT merge inbox with no confidential balance 6. Test Confidential MPT merge inbox with various token balance 7. Test Confidential MPT merge inbox account is issuer 8. Test Confidential MPT merge inbox convert twice then merge 9. Test Confidential MPT merge inbox account is individual account locked 10. Test Confidential MPT merge inbox account is globally locked 11. Test Confidential MPT merge inbox invalid MPT Issuance id 12. Test Confidential MPT merge inbox missing MPT Issuance id 13. Test Confidential MPT merge inbox by third party 14. Test Confidential MPT merge inbox empty 15. Test Confidential MPT merge inbox conver and merge multiple times 16. Test Confidential MPT merge inbox enczero determinism 17. Test Confidential MPT merge inbox enczero validation 18. Test Confidential MPT merge inbox and destroy mptoken without merge inbox 19. Test Confidential MPT merge inbox and destroy mptoken after merge inbox 20. Test Confidential MPT merge inbox with maximum value 21. Test Confidential MPT merge inbox rapid state changes 22. Test Confidential MPT merge inbox with mixed public confidential balance 23. Test Confidential MPT merge inbox at minimum xrp reserve 24. Test Confidential MPT merge inbox with require auth flag 25. Test Confidential MPT merge inbox idempotency empty inbox 26. Test Confidential MPT merge inbox determinism across accounts 27. Test Confidential MPT merge inbox balance conservation 28. Test Confidential MPT merge inbox decrypt verification 29. Test Confidential MPT merge inbox with multisign with disabled master key 30. Test Confidential MPT merge inbox version increments by one 31. Test Confidential MPT merge inbox cb in amount field mismatch adversarial ## Transactor — ConvertBack 1. Test Confidential MPT convert back entire confidential balance 2. Test Confidential MPT convert back partial confidential balance 3. Test Confidential MPT convert back without merging inbox 4. Test Confidential MPT convert back with balance in inbox and spending 5. Test Confidential MPT convert back with balance only in inbox 6. Test Confidential MPT convert back with no balance in both inbox and spending 7. Test Confidential MPT convert back account does not exist 8. Test Confidential MPT convert back account does not have mptoken 9. Test Confidential MPT convert back account is issuer 10. Test Confidential MPT convert back invalid mptokenissuanceid 11. Test Confidential MPT convert back mptamount greater than spending balance 12. Test Confidential MPT convert back mptamount invalid values 13. Test Confidential MPT convert back zero amount 14. Test Confidential MPT convert back mptamount missing 15. Test Confidential MPT convert back holder encrypted amount missing 16. Test Confidential MPT convert back holder encrypted amount invalid 17. Test Confidential MPT convert back issuer encrypted amount missing 18. Test Confidential MPT convert back issuer encrypted amount invalid 19. Test Confidential MPT convert back blinding factor missing 20. Test Confidential MPT convert back blinding factor invalid 21. Test Confidential MPT convert back zkproof missing 22. Test Confidential MPT convert back zkproof invalid 23. Test Confidential MPT convert back balance commitment missing 24. Test Confidential MPT convert back balance commitment invalid 25. Test Confidential MPT convert back with auditor encrypted amount no auditor set 26. Test Confidential MPT convert back no auditor encrypted amount with auditor set 27. Test Confidential MPT convert back with auditor encrypted amount and auditor set 28. Test Confidential MPT convert back account locked 29. Test Confidential MPT convert back and destroy mptoken and delete accounts 30. Test Confidential MPT convert back encrypted balance delta equals public balance delta ## Transactor — Clawback 1. Test Confidential MPT clawback with tfMPTCanClawback set 2. Test Confidential MPT clawback after partial convert 3. Test Confidential MPT clawback public mpt 4. Test Confidential MPT clawback without tfMPTCanClawback flag 5. Test Confidential MPT clawback non issuer 6. Test Confidential MPT clawback holder missing 7. Test Confidential MPT clawback holder nonexistent 8. Test Confidential MPT clawback third party holder 9. Test Confidential MPT clawback MPT amount zero 10. Test Confidential MPT clawback from holder with zero confidential balance 11. Test Confidential MPT clawback MPT amount exceeds balance 12. Test Confidential MPT clawback MPT amount less than balance 13. Test Confidential MPT clawback zkproof missing 14. Test Confidential MPT clawback zkproof invalid 15. Test Confidential MPT clawback MPT Issuance id missing 16. Test Confidential MPT clawback MPT Issuance id invalid 17. Test Confidential MPT clawback without privacy flag 18. Test Confidential MPT clawback without issuer encryption key 19. Test Confidential MPT clawback multiple holders 20. Test Confidential MPT clawback holder equals issuer 21. Test Confidential MPT clawback with inbox and spending 22. Test Confidential MPT clawback from source after send 23. Test Confidential MPT clawback from destination after send 24. Test Confidential MPT clawback public balance with regular clawback while confidential setup exists 25. Test Confidential MPT clawback dual public and confidential workflow 26. Test Confidential MPT clawback and delete account 27. Test Confidential MPT clawback with auditor 28. Test Confidential MPT clawback holder account individually locked before clawback 29. Test Confidential MPT clawback tokens globally locked before clawback 30. Test Confidential MPT clawback invariant coa decreases ## Issuance Lifecycle 1. Test Issuance set set confidential when coa gt zero is tecNO PERMISSION 2. Test Issuance set clear confidential bit is unrecognized returns temINVALID FLAG 3. Test Issuance set set confidential when cannot mutate is tecNO PERMISSION 4. Test Issuance set replace issuer key is tecNO PERMISSION 5. Test Issuance set replace auditor key surfaces as temMALFORMED 6. Test Issuance set keys when confidential not enabled is tecNO PERMISSION 7. Test Issuance set keys with enable in same tx succeeds 8. Test Issuance set keys with unrecognized clear bit is temINVALID FLAG 9. Test Issuance set re register issuer key after coa gt zero is tecNO PERMISSION 10. Test Issuance set set confidential via mutable flag sets lsf flag 11. Test Issuance set confidential mutate with holder field is temMALFORMED 12. Test Issuance set keys with holder field is temMALFORMED 13. Test Issuance set confidential with nonzero transfer fee is tecNO PERMISSION 14. Test Issuance set enable privacy and nonzero transfer fee same tx temBAD TRANSFER FEE 15. Test MPT Issuance create privacy flag without issuer key 16. Test MPT Issuance create issuer key without privacy flag 17. Test MPT Issuance create auditor key without privacy flag 18. Test MPT Issuance create invalid issuer elgamal key 19. Test MPT Issuance create invalid auditor elgamal key 20. Test MPT Issuance create coa initialized to zero 21. Test MPT Issuance set remove auditor key with active supply 22. Test MPT Issuance set non issuer privacy settings 23. Test MPT Issuance create privacy flag with nonzero transfer fee 24. Test MPT Issuance set auditor key without issuer key 25. Test MPT Issuance destroy with nonzero confidential outstanding amount 26. Test Privacy enabled at creation cannot be disabled by any clear bit 27. Test Privacy enabled via mutable flag post creation then clear attempt returns temINVALID FLAG 28. Test Privacy frozen off via tfMPTCannotMutatePrivacy blocks all later enables 29. Test Re enable privacy on already enabled Issuance is idempotent 30. Test All six capability flags one way under confidential issuance 31. Test Enabling privacy post creation via mutableflags enables all confidential transactors 32. Test Authorize lifecycle failed unauthorize does not decrement coa 33. Test Authorize lifecycle unauthorize after full round trip succeeds 34. Test Authorize lifecycle unauthorize when other holder has cb succeeds 35. Test Authorize lifecycle reauthorize after unauthorize yields fresh mptoken 36. Test Authorize lifecycle issuer unauthorize blocks subsequent sends 37. Test Authorize lifecycle authorize destroyed Issuance returns object not found 38. Test Issuer can create confidential MPT with canclawback without account flag 39. Test Issuer can confidential clawback without account flag 40. Test Setting asfAllowTrustLineClawback after MPT Issuance returns tecOWNERS 41. Test Issuance without tfMPTCanClawback rejects confidential clawback even with account flag ## Crypto 1. Test Crypto wrapper generate keypair returns correctly sized hex 2. Test Crypto wrapper generate keypair is non deterministic 3. Test Crypto wrapper generate blinding factor is correctly sized and nondeterministic 4. Test Crypto wrapper encrypt decrypt round trip 5. Test Crypto wrapper decrypt with wrong privkey does not silently succeed 6. Test Crypto wrapper decrypt amount outside range returns rc minus 1 7. Test Crypto wrapper decrypt at exact range bounds inclusive 8. Test Crypto wrapper elgamal round trip is homomorphic consistent 9. Test Crypto wrapper same plaintext distinct blinding yields distinct ciphertexts 10. Test Crypto wrapper encrypt with explicit blinding factor is deterministic 11. Test Crypto wrapper pedersen commitment is deterministic in inputs 12. Test Crypto wrapper pedersen commitment differs on different amount 13. Test Crypto wrapper encrypt with wrong sized pubkey raises valueerror 14. Test Crypto wrapper decrypt with wrong sized privkey raises valueerror 15. Test Crypto wrapper encrypt with wrong sized blinding factor raises valueerror 16. Test Crypto wrapper pedersen commitment with wrong sized bf raises valueerror 17. Test Default range decrypts small amount 18. Test Narrow range decrypts value within range 19. Test Below range returns failure 20. Test Above range returns failure 21. Test Boundary low and high both decrypt 22. Test Inverted range returns failure 23. Test Zero excluded when range low gt zero 24. Test Auditor decrypts real ciphertext with explicit range end to end 25. Test Auditor decrypts initial convert balance to actual amount 26. Test Auditor view decreases correctly after sender sends 27. Test Auditor view increases correctly after receiver merges 28. Test Auditor aggregate view equals Issuance confidential outstanding 29. Test Auditor view unchanged across repeated rerandomization sends 30. Test Auditor view zeros after full convert back 31. Test Rerand destination inbox differs from tx ciphertext 32. Test Rerand destination issuer mirror differs from tx ciphertext 33. Test Rerand destination auditor mirror behavior 34. Test Rerand sender spending balance is not rerandomized 35. Test Rerand sender issuer mirror is not rerandomized 36. Test Rerand multiple sends end to end decryption 37. Test Rerand two consecutive sends produce different inbox deltas 38. Test Rerand destination inbox changes under zero value send 39. Test Rerand version counter increments once per send 40. Test Rerand destination inbox and issuer mirror stay in lockstep per send 41. Test Rerand send to self is rejected at preflight and does not mutate state 42. Test Rerand two different senders to same destination compose correctly 43. Test Rerand does not break issuer clawback path after send 44. Test Rerand auditor mirror differs between two identical sends ## Hardening 1. Test Send to destination requiring dest tag fails 2. Test Send to destination requiring dest tag with tag succeeds 3. Test Send with dest tag and auditor succeeds 4. Test Send when destination authorized but never converted fails 5. Test Send when sender authorized but never converted fails 6. Test Send receiver confidential version unchanged 7. Test Convert zero amount from individually frozen account fails 8. Test Convert zero amount from globally frozen Issuance fails 9. Test Convert zero amount from unauthorized account fails 10. Test Holder unauthorize with nonzero confidential balance fails 11. Test Issuance set rotate existing issuer encryption key fails 12. Test Issuance set add auditor after holders have confidential balance fails 13. Test Create with privacy locked off then enable attempt fails 14. Test Create with invalid mutable flag bit fails 15. Test Midflight auditor cannot be retrofitted after issuer key already set 16. Test Midflight set require auth after holders have cb freezes unallowlisted 17. Test Midflight change domain id strands holder not in new domain 18. Test Midflight per holder lock blocks holder unauthorize 19. Test Crash send all zero zkproof 20. Test Crash send all ones zkproof 21. Test Crash send random garbage zkproof 22. Test Crash send bit flipped zkproof 23. Test Crash send zero amount commitment 24. Test Crash send zero balance commitment 25. Test Crash send zero sender encrypted amount 26. Test Crash send swapped sender dest ciphertexts 27. Test Crash convert all zero zkproof 28. Test Crash convert back all zero zkproof 29. Test Crash clawback all zero zkproof 30. Test Crash send rapid fire garbage proofs no corruption 31. Test Acctdel holder with active cb s blocks account delete 32. Test Acctdel holder with unmerged inbox blocks account delete 33. Test Acctdel issuer with active confidential outstanding blocks 34. Test Acctdel orphan mptoken after Issuance destroy full cleanup chain 35. Test Acctdel issuer after destroy with outstanding orphan holders succeeds 36. Test Acctdel stuck holder after issuer unauthorize with cb present ## Adversarial / Security 1. Test Adversarial duplicate send txn 2. Test Adversarial stale send proof after merge 3. Test Adversarial reuse convert proof after state change 4. Test Adversarial reuse convert back proof after state change 5. Test Adversarial two sends exceed balance same ledger 6. Test Adversarial send and convert back same balance same ledger 7. Test Adversarial send vs clawback race same ledger 8. Test Adversarial valid ec point wrong value 9. Test Adversarial send amount commitment aliased to balance commitment 10. Test Adversarial swap holder and issuer encrypted amounts 11. Test Adversarial zero byte zkproof 12. Test Adversarial proof for different statement 13. Test Adversarial point on wrong curve 14. Test Adversarial identity element as ciphertext 15. Test Adversarial all zero blinding factor 16. Test Adversarial range proof negative modular 17. Test Adversarial nonce reuse across sends 18. Test Adversarial wrong holder key in send 19. Test Adversarial holder amount encrypted under issuer key 20. Test Adversarial issuer amount encrypted under holder key 21. Test Adversarial valid proof wrong account signature 22. Test Adversarial key hijacking first convert 23. Test Adversarial auditor amount wrong key 24. Test Adversarial auditor amount different value 25. Test Adversarial stale auditor key after rotation 26. Test Adversarial range proof near uint64 overflow 27. Test Adversarial cb in amount tampered 28. Test Adversarial convert back tampered amount exceeds proof 29. Test Adversarial send from inbox without merge 30. Test Adversarial convert then immediate convert back same ledger 31. Test Adversarial clawback from destroyed mptoken 32. Test Adversarial clawback after holder converts back to zero 33. Test Adversarial send with extra unknown fields 34. Test Adversarial send all required fields missing 35. Test Adversarial holder encrypted amount wrong byte length 36. Test Adversarial issuer encrypted amount truncated 37. Test Adversarial zkproof truncated 38. Test Adversarial zkproof padded with extra bytes 39. Test Adversarial confidential state persists across operations 40. Test Adversarial two sends canonical order 41. Test Adversarial replay with new sequence 42. Test Adversarial cross type zkp replay 43. Test Adversarial non issuer clawback valid zkp 44. Test Adversarial third party merge inbox valid zkp 45. Test Adversarial enable privacy on existing transfer fee Issuance reverse mutex ## Invariants 1. Test Inv send increments version when spending changes 2. Test Inv convert creates consistent encrypted fields 3. Test Inv send preserves encrypted field coexistence 4. Test Inv convert token conservation holder and issuer side 5. Test Inv send does not modify public mptamount at either end 6. Test Inv send does not modify Issuance outstandingamount 7. Test Inv clawback decreases coa and oa by identical amount 8. Test Clawback under global lock no invariant 9. Test Convert back under global lock returns teclocked 10. Test Inv coa never exceeds oa through chain 11. Test Inv send with tampered amount commitment rejected leaves coa unchanged 12. Test Inv full clawback zeros holder cb and removes their coa contribution 13. Test Inv full convert back chain leaves no orphan confidential state 14. Test Convert with zero amount asymmetric behavior probe 15. Test Convert back with zero amount returns temBAD AMOUNT 16. Test Clawback with zero amount returns temBAD AMOUNT 17. Test Send to self returns temMALFORMED 18. Test Convert with amount exceeding public balance returns tecINSUFFICIENT FUNDS 19. Test Two issuances independent version counters 20. Test Two issuances independent coa accounting 21. Test Two issuances independent auditor decryption 22. Test Account delete blocked when alice has cb on one of two issuances 23. Test Convert back on Issuance a does not affect balance on b 24. Test Clawback on Issuance a does not affect balance on b 25. Test scenario A send with auditor all zero zkproof rejected 26. Test scenario A send with auditor random garbage zkproof rejected 27. Test scenario A send with auditor bit flipped zkproof rejected 28. Test scenario A send with auditor truncated zkproof rejected 29. Test scenario B convert MPT amount as string above 2 pow 32 succeeds 30. Test scenario B convert MPT amount as int above 2 pow 32 is rejected 31. Test scenario B convert two holders summing above 2 pow 32 keeps coa correct 32. Test scenario B Issuance create with maximum amount at 2 pow 63 minus 1 33. Test scenario B Issuance create with maximum amount above 2 pow 63 is rejected 34. Test scenario C convert back from inbox only no spending is rejected 35. Test scenario C send from inbox only no spending is rejected 36. Test scenario C merge inbox after inbox only state promotes value to spending 37. Test scenario D send after issuer unauthorizes sender fails 38. Test scenario E clawback after issuer unauthorizes holder succeeds 39. Test scenario F three holder full chain conserves total value 40. Test scenario F two Issuance concurrent chains remain isolated 41. Test scenario H zero amount convert registers holder key and enables inbound send ## Batch / Composition 1. Test Batch confidential MPT two sends with stale proof allornothing 2. Test Batch confidential MPT independent send with one failing 3. Test Batch confidential MPT convert then merge inbox allornothing 4. Test Batch delegated send missing permission allornothing 5. Test Batch delegated send with delegate as outer needs no batch signer 6. Test Batch delegated send with delegate as outer with batch signer 7. Test Batch confidential MPT two chained sends same sender allornothing 8. Test Batch confidential MPT send then convert back same sender allornothing 9. Test Batch confidential MPT three chained sends same sender allornothing 10. Test Batch confidential MPT chained send wrong predicted ciphertext fails 11. Test Batch only one with two valid chained sends executes first only 12. Test Batch only one first send to unconverted fails falls through to second 13. Test Batch until failure first send commits then stale second fails 14. Test Batch allornothing issuer lock then alice send rolls back both 15. Test Batch independent three holders converts coa aggregate correct 16. Test Batch allornothing inner revokes delegate then later inner uses it rolls back 17. Test Batch two chained delegated sends from same delegator both commit 18. Test Delegated send after delegator loses domain membership fails ## Delegation 1. Test Delegate confidential MPT send basic 2. Test Delegate confidential MPT send missing permission 3. Test Delegate confidential MPT convert 4. Test Delegate confidential MPT merge inbox 5. Test Delegate confidential MPT convert back 6. Test Delegate confidential MPT clawback by issuer 7. Test Delegate neg send perm only cannot convert back 8. Test Delegate neg convert back perm only cannot send 9. Test Delegate neg clawback with non issuer account rejected at preflight 10. Test Delegate neg revoked permission blocks subsequent use 11. Test Delegate neg self delegation rejected 12. Test Delegate neg send with proof over delegate keys rejected ## Cross-Feature 1. Test Ticket based first convert succeeds when proof binds to ticket seq 2. Test Ticket based send succeeds when proof binds to ticket seq 3. Test Ticket based send with wrong seq in proof returns tecBAD PROOF 4. Test Ticket based convert back succeeds when proof binds to ticket seq 5. Test Ticket based send with nonzero sequence returns temSEQ AND TICKET 6. Test Ticket based send with nonexistent ticket is rejected 7. Test Ticket based send consumes ticket even on tecBAD PROOF 8. Test Ticket based send with matching credential succeeds 9. Test Escrow create with MPT locks only public balance 10. Test Escrow finish credits destination public not CB 11. Test Confidential send succeeds with active outgoing escrow 12. Test Escrow create amount exceeding unlocked public returns tecINSUFFICIENT FUNDS 13. Test Check create then cash on privacy MPT does not touch either side CB 14. Test Convert amount capped by unlocked public not total owned 15. Test Vault create with confidential enabled MPT succeeds 16. Test Vault deposit preserves holder confidential state 17. Test Vault deposit fails when holder has no public balance 18. Test Vault withdraw preserves destination confidential state 19. Test Vault pseudo mptoken has no confidential fields after deposit 20. Test Vault confidential clawback independent of vault holdings 21. Test Send at exactly 10x base fee succeeds 22. Test Send at one drop below 10x base fee returns telINSUF FEE P 23. Test First convert does not change holder owner count 24. Test Issuance create then key register bumps issuer owner count by exactly 1 25. Test Five confidential sends drain alice xrp by exactly 5x send fee 26. Test Memo on confidential send does not affect proof 27. Test Multi sig confidential send at exactly required fee succeeds 28. Test Multi sig confidential send at one drop below required returns telINSUF FEE P 29. Test Convert does not update sfOutstandingAmount 30. Test Convert fee multiplier 10x bounds 31. Test Merge inbox fee multiplier 10x bounds 32. Test Convert back fee multiplier 10x bounds 33. Test Clawback fee multiplier 10x bounds 34. Test Send to deposit auth destination without preauth fails 35. Test Send to deposit auth destination after direct preauth succeeds 36. Test Send to deposit auth destination after unauth fails again 37. Test Send to deposit auth destination with matching credential succeeds 38. Test Send after credential deleted fails with nonexistent credential 39. Test Send with third party credential id fails 40. Test Send with unaccepted credential fails 41. Test Send with duplicate credential ids fails 42. Test Send with credential ids when destination has no deposit auth succeeds 43. Test Credential based send with frozen destination fails with lock 44. Test Failed credential based send does not credit destination inbox 45. Test Credential based send credits all encrypted amounts when auditor present 46. Test Issuance set domain id on Issuance without require auth fails 47. Test Issuance set nonexistent domain id fails 48. Test Confidential send in permissioned domain succeeds 49. Test Pd payment to uncredentialed holder blocks funding 50. Test Pd send when destination credential revoked blocks send 51. Test Pd send when sender credential revoked blocks send 52. Test Pd send after domain id added post convert succeeds for credentialed 53. Test Pd clear domain id via zero sentinel revokes holder authorization 54. Test Pd send with unaccepted destination credential blocks send 55. Test Convert with reserve sponsor returns temINVALID FLAG 56. Test Merge inbox with reserve sponsor returns temINVALID FLAG 57. Test Send with reserve sponsor returns temINVALID FLAG 58. Test Convert back with reserve sponsor returns temINVALID FLAG 59. Test Clawback with reserve sponsor returns temINVALID FLAG 60. Test Send with fee plus reserve flags returns temINVALID FLAG 61. Test Send with zero sponsor flags returns temINVALID FLAG 62. Test Send with sponsor equal account returns temMALFORMED 63. Test Prefunded fee sponsorship for confidential send succeeds ## Bug Hunt 1. Test sum IssuerEncryptedBalance equals coa after multi hop 2. Test IssuerEncryptedBalance zero after full clawback 3. Test IssuerEncryptedBalance decrypts to expected after partial send 4. Test stale version send rejected after intervening send 5. Test convertback tampered MPT amount field rejected 6. Test send balance commitment all zero bytes rejected 7. Test send amount commitment all zero bytes rejected 8. Test holder key immutable second convert with new key rejected 9. Test convert with holder key equal to issuer key rejected 10. Test first convert initializes spending to enczero and version zero 11. Test second convert does not mutate spending or version 12. Test issuer can re encrypt holder balance under new auditor key off chain 13. Test enable auditor after convert send should not tefinternal 14. Test mergeinbox on encrypted zero inbox version semantics 15. Test stale send proof after clawback rejected 16. Test zero amount convert registers key and accepts inbound 17. Test send ciphertext under wrong key reaches bad proof not internal 18. Test send swap ciphertexts from different amount proof rejected 19. Test send to authorized but unconverted holder clean reject 20. Test batch ct sends allornothing rolls back version on final failure 21. Test freeze and send same ledger ordering is clean 22. Test iss enc key reset after full clawback blocked pre reset 23. Test convert with holder key not owned by account silent loss 24. Test convert at coa boundary rejects cleanly not internal 25. Test Add auditor after zero amount convert does not crash next convert 26. Test Add auditor after convert convertback roundtrip blocked by gates 27. Test Convert back amount within cb s plus cb in but exceeding cb s rejected 28. Test Recipient merge between two sender sends does not break sender 29. Test Clawback when holder has only unmerged inbox state reset correctly

The Transactor Volume 5, Issue 01 (1984)

In 1977, Commodore introduced the PET (Personal Electronic Transactor) home/personal computer. Appearing before either the Apple II or the Radio Shack…

Yet another way the poor are subsidizing the rich