summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--taler-fc19/paper.tex12
1 files changed, 7 insertions, 5 deletions
diff --git a/taler-fc19/paper.tex b/taler-fc19/paper.tex
index 8091319..fa3baf8 100644
--- a/taler-fc19/paper.tex
+++ b/taler-fc19/paper.tex
@@ -123,7 +123,7 @@ transaction.
Our system model tracks the total amount of
coins withdrawn by each customer.
-Customers are identified by their public key $\V{pkCustomer}$. Every customer
+Customers are identified by their public key $\V{pkCustomer}$. Every customer's wallet
keeps track of the following data:
\begin{itemize}
\item $\V{wallet}[\V{pkCustomer}]$ contains sets of the customer's coin records,
@@ -619,10 +619,12 @@ Hence we ensure that:
intermittently aborted.
\end{itemize}
-Note that we do not give the adversary access to the \ora{Share} oracle, since
-that would trivially allow the adversary to win the conservation game. In
-practice, conservation only holds for customers that do not share coins with
-parties that they do not fully trust.
+We do not give the adversary access to the \ora{Share} oracle,
+which naively lets them win the conservation game, because doing so
+correctly requires tracking the corrupted customers more carefully,
+which harms our exposition.
+In practice, conservation only holds for customers that do not share
+coins with parties that they do not fully trust.
\subsection{Unforgeability}