Zcash NU5

What is NU5?

NU5 is the sixth major network upgrade for Zcash and a component of the Halo Arc product suite release, and in accordance with the Zcash trademark agreement, it is endorsed by both Electric Coin Co. and the Zcash Foundation. NU5 enables full support for the Orchard shielded protocol and Unified Addresses.

NU5 represents the continued evolution of our zk-SNARK technology stack and will move Zcash to the Halo proving system, removing the need for the trusted setup and upgrading the protocol’s underlying cryptography.

Naming conventions for this and future Zcash network upgrades has shifted from a theme-based alias, like Canopy and Sapling, to a simple number system. This is meant to provide clarity and consistency moving forward.

ZIPs

• ZIP 216: Require Canonical Jubjub Point Encodings Fixes an oversight in the implementation of the Sapling consensus rules, by rejecting all non-canonical representations of Jubjub points.
• ZIP 224: Orchard Shielded Protocol NU5 introduces a new shielded pool with spending keys and payment addresses that are amenable to future scalability improvements. New pools with separate privacy sets are instituted at major network upgrades to increase security of the monetary base.
• ZIP 225: New transaction version format This proposal defines an update to the Zcash peer-to-peer transaction format to include support for data elements required to support the Orchard protocol. The new transaction format defines well-bounded regions of the serialized form to serve each of the existing pools of funds, and adds and describes a new region containing Orchard-specific elements.
• ZIP 239: Relay of Version 5 Transactions This proposal alters the peer-to-peer network protocol, adding a new inv message type which must be used for advertising V5 transactions. This ensures that network nodes cannot perform a denial-of-service attack on wallets that are submitting V5 transactions to the mempool.
• ZIP 244:  Non-malleable transaction IDs Among other benefits, this update defines a new transaction digest algorithm for the NU5 network upgrade onward, in order to introduce non-malleable transaction identifiers that commit to all transaction data except for attestations to transaction validity.
• ZIP 316: Unified addresses The unified address (UA) is a future-proof Zcash address format that improves usability, increases the ease of interoperability, and supports shielding Zcash by default. UAs make Zcash easier to use by removing the complexity of multiple address types. This simplifies the user experience and increases interoperability between shielded-only applications and transparent-only applications.

Updated ZIPs

• ZIP 32: Shielded Hierarchical Deterministic Wallets
• ZIP 203: Transaction Expiry
• ZIP 209: Prohibit Negative Shielded Chain Value Pool Balances
• ZIP 212: Allow Recipient to Derive Ephemeral Secret from Note Plaintext
• ZIP 213: Shielded Coinbase
• ZIP 221: FlyClient – Consensus-Layer Changes

Consensus Branch ID

Version Group ID

How do I upgrade?

If you are unsure about how to upgrade your node, don’t worry! The Zcash Full Node and CLI user guide has comprehensive sections on upgrading nodes, whether they were installed from source code or the Debian package. A careful read of this guide should answer most upgrade-related questions.

Note for ASIC Miners

ASIC miners do not verify consensus rules, and NU5 does not alter the block header, so there’s no specific upgrade action needed on their part. They rely on the mining pool they’re connecting to and should verify the pool has upgraded if not identified in the list below.

Additional information

• Network Upgrade Developer Guide
• Current stable version of the zcashd client
• Network Upgrade Blog Archive
• All Upgrades

Third-party support

Third-parties who wish to be included in this list should email info@z.cash with a link to your official statement of intent for NU5 support.

Security Audits

• Security assessments of NU5 were conducted by NCC and QEDIT. Copies of their reports can be found here and here.
• A review of the Halo 2 security proof and protocol was conducted by researcher and cryptography expert Mary Maller. A copy can be viewed here.