get_share_and_ticket — Group 15, Code 03

Preferred combined command: 32-byte share + optional 4-byte ticket.

Type 8 only (since 19 September 2026)

This command mints a ticket against a mail coin whose AN travels in the body, so it is held to the write path’s standard: Type 8 only, with the tag verified; rke_allow_type0 is deliberately not consulted. The cs_id must be in the derived form or the request is refused with ERROR_INVALID_PARAMETER (198).

Request command_data (after challenge)

Total 67 bytes (Appendix F.5):

cs_id[16] || key_id[1] || client_sn[5] || timestamp_be64[8] || client_nonce[16]
|| mail_denom[1] || mail_sn_be[4] || mail_an[16]

All-zero mail_an = anonymous: response ticket is 0.

Response body

share[32] || ticket_be32[4]   // 36 bytes

Derive K_rke by XOR of ≥13 shares then Expand-Only HKDF (RKE-EncryptionKey-v2.0).

Source: raidax/rke/rke_share_ticket.c.