diff options
Diffstat (limited to 'taler-fc19/paper.tex')
| -rw-r--r-- | taler-fc19/paper.tex | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/taler-fc19/paper.tex b/taler-fc19/paper.tex index 7515627..f84f118 100644 --- a/taler-fc19/paper.tex +++ b/taler-fc19/paper.tex @@ -975,18 +975,18 @@ Using these primitive, we now instantiate the syntax: x_i' &\leftarrow \algo{Kx}(t_i, \V{pkCoin}_0)\\
(\V{skCoin}_i', \V{pkCoin}_i') &\leftarrow
\algo{KeyGen}^*_{CSK}(x_i', 1^\lambda) \\
- h_T' &:= H(T'_1, \dots, T_{\gamma-1}, T_\gamma, T_{\gamma+1}', \dots, T_\kappa')
+ h_T' &:= H_{pk}(T'_1, \dots, T_{\gamma-1}, T_\gamma, T_{\gamma+1}', \dots, T_\kappa')
\end{align*}
and simulates the blinding protocol with recorded transcripts (without signing each message,
as indicated by the dot ($\cdot$) instead of a signing secret key), obtaining
\begin{align*}
(\overline{m}_i', r_i', \mathcal{T}_i) &\leftarrow
- \algo{Blind}^*_{BS}(\mathcal{S}(\V{skD}_u), \mathcal{R}(H(x_i'), \cdot, \V{pkD}_u, \V{skCoin}_i))\\
+ \algo{Blind}^*_{BS}(\mathcal{S}(\V{skD}_u), \mathcal{R}(x_i', \cdot, \V{pkD}_u, \V{skCoin}_i))\\
\end{align*}
and finally
\begin{align*}
- h_{\overline{m}}' &:= H(\overline{m}_1', \dots, \overline{m}_\gamma, \dots, \overline{m}_\kappa')\\
- h_C &:= H(h_T' \Vert h_{\overline{m}}').
+ h_{\overline{m}}' &:= H_{pk}(\overline{m}_1', \dots, \overline{m}_\gamma, \dots, \overline{m}_\kappa')\\
+ h_C &:= H_{pk}(h_T' \Vert h_{\overline{m}}').
\end{align*}
For each $i \ne \gamma$, the exchange computes
|