missing subscripts

1 files changed, 4 insertions, 4 deletions

diff --git a/taler-fc19/paper.tex b/taler-fc19/paper.tex
index 7515627..f84f118 100644
--- a/taler-fc19/paper.tex
+++ b/taler-fc19/paper.tex
@@ -975,18 +975,18 @@ Using these primitive, we now instantiate the syntax:
       x_i' &\leftarrow \algo{Kx}(t_i, \V{pkCoin}_0)\\

       (\V{skCoin}_i', \V{pkCoin}_i') &\leftarrow

               \algo{KeyGen}^*_{CSK}(x_i', 1^\lambda) \\

-      h_T' &:= H(T'_1, \dots, T_{\gamma-1}, T_\gamma, T_{\gamma+1}', \dots, T_\kappa')

+      h_T' &:= H_{pk}(T'_1, \dots, T_{\gamma-1}, T_\gamma, T_{\gamma+1}', \dots, T_\kappa')

     \end{align*}

     and simulates the blinding protocol with recorded transcripts (without signing each message,

     as indicated by the dot ($\cdot$) instead of a signing secret key), obtaining

     \begin{align*}

       (\overline{m}_i', r_i', \mathcal{T}_i) &\leftarrow

-          \algo{Blind}^*_{BS}(\mathcal{S}(\V{skD}_u), \mathcal{R}(H(x_i'), \cdot, \V{pkD}_u, \V{skCoin}_i))\\

+          \algo{Blind}^*_{BS}(\mathcal{S}(\V{skD}_u), \mathcal{R}(x_i', \cdot, \V{pkD}_u, \V{skCoin}_i))\\

     \end{align*}

     and finally

     \begin{align*}

-      h_{\overline{m}}' &:= H(\overline{m}_1', \dots, \overline{m}_\gamma, \dots, \overline{m}_\kappa')\\

-      h_C &:= H(h_T' \Vert h_{\overline{m}}').

+      h_{\overline{m}}' &:= H_{pk}(\overline{m}_1', \dots, \overline{m}_\gamma, \dots, \overline{m}_\kappa')\\

+      h_C &:= H_{pk}(h_T' \Vert h_{\overline{m}}').

     \end{align*}

 

     For each $i \ne \gamma$, the exchange computes