summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeff Burdges <burdges@gnunet.org>2018-09-15 15:18:16 +0200
committerJeff Burdges <burdges@gnunet.org>2018-09-15 15:18:16 +0200
commite4930121ff1a61cbe08422e4d7358d51a90df682 (patch)
treef862e4982a34acd38e9a9f4aa828e05b7853d5f2
parent9d1c1f2ae97ca109151050f845206f8093841166 (diff)
downloadpapers-e4930121ff1a61cbe08422e4d7358d51a90df682.tar.gz
papers-e4930121ff1a61cbe08422e4d7358d51a90df682.tar.bz2
papers-e4930121ff1a61cbe08422e4d7358d51a90df682.zip
Two changes Christian seemingly approved in email
-rw-r--r--taler-fc19/paper.tex12
1 files changed, 7 insertions, 5 deletions
diff --git a/taler-fc19/paper.tex b/taler-fc19/paper.tex
index 8091319..fa3baf8 100644
--- a/taler-fc19/paper.tex
+++ b/taler-fc19/paper.tex
@@ -123,7 +123,7 @@ transaction.
Our system model tracks the total amount of
coins withdrawn by each customer.
-Customers are identified by their public key $\V{pkCustomer}$. Every customer
+Customers are identified by their public key $\V{pkCustomer}$. Every customer's wallet
keeps track of the following data:
\begin{itemize}
\item $\V{wallet}[\V{pkCustomer}]$ contains sets of the customer's coin records,
@@ -619,10 +619,12 @@ Hence we ensure that:
intermittently aborted.
\end{itemize}
-Note that we do not give the adversary access to the \ora{Share} oracle, since
-that would trivially allow the adversary to win the conservation game. In
-practice, conservation only holds for customers that do not share coins with
-parties that they do not fully trust.
+We do not give the adversary access to the \ora{Share} oracle,
+which naively lets them win the conservation game, because doing so
+correctly requires tracking the corrupted customers more carefully,
+which harms our exposition.
+In practice, conservation only holds for customers that do not share
+coins with parties that they do not fully trust.
\subsection{Unforgeability}