diff options
Diffstat (limited to 'design-documents/024-age-restriction.rst')
| -rw-r--r-- | design-documents/024-age-restriction.rst | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/design-documents/024-age-restriction.rst b/design-documents/024-age-restriction.rst index b9553432..5b6e091d 100644 --- a/design-documents/024-age-restriction.rst +++ b/design-documents/024-age-restriction.rst @@ -392,6 +392,13 @@ Then calculate the blinding :math:`\beta` for the coin as .. math:: \beta &:= \text{HKDF}(c_s, \text{"blinding"}) +If the denomination is using Clause-Schnorr signatures, calculate the nonce +:math:`n` for the coin as + +.. math:: + n &:= \text{HKDF}(c_s, \text{"cs-nonce"}) + + For the age commitment, calculate: @@ -414,8 +421,9 @@ the wallet can use the vector :math:`(p_1,\ldots,p_m,\bot,\ldots,\bot)` of private keys for the attestation. Provided with the private key :math:`c_s`, the exchange can therefore calculate -the blinding :math:`\beta` and the age commitment :math:`\vec{q}` itself, along -with the coin's public key :math:`C_p` and use the value of +the blinding :math:`\beta`, the nonce :math:`n` (if needed) and the age +commitment :math:`\vec{q}` itself, along with the coin's public key :math:`C_p` +and use the value of .. math:: |