Glasspane v0

Prove one shielded Zcash payment without revealing the rest of your wallet.

How Glasspane works

Every shielded Zcash output is encrypted twice on chain: once to the receiver with their Incoming Viewing Key, and once to the sender with their Outgoing Viewing Key. The sender's encryption uses a per-output key called the OCK, derived from the sender's OVK plus the output's published cv, cmstar, and epk.

A Glasspane receipt discloses one specific OCK. Anyone holding the receipt can decrypt exactly that one output and learn the recipient, value, and memo. Other outputs in the same transaction stay opaque (each one uses a different OCK). The sender's wallet stays private. Receipts are forwardable and not revocable — share deliberately.

The cryptography is the same primitive used inside the Zcash protocol spec and verified by Glasspane's test suite against the published Zcash test vectors for both Orchard and Sapling pools.