From 020ddeca0a98028a026a19ff3b9e524e5652c6e3 Mon Sep 17 00:00:00 2001 From: Christian Grothoff Date: Tue, 25 Sep 2018 10:20:16 +0200 Subject: no unblinding for \sigma_x --- taler-fc19/paper.tex | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/taler-fc19/paper.tex b/taler-fc19/paper.tex index e69c073..2d173b7 100644 --- a/taler-fc19/paper.tex +++ b/taler-fc19/paper.tex @@ -790,7 +790,7 @@ We require the following two security properties for $\textsc{BlindSign}$: m \randsel M, \\ \sigma \leftarrow \algo{UnblindSig}_{BS}(r, m, \algo{Sign}_{BS}(\V{sk}, \algo{Blind}_{BS}(\mathcal{S}(\V{sk}), m)) ) \\ x \randsel \overline{M}, \\ - \sigma_x \leftarrow \algo{UnblindSig}_{BS}(r, x, \algo{Sign}_{BS}(\V{sk}, \algo{Blind}_{BS}(\mathcal{S}(\V{sk}), x)) ) + \sigma_x \leftarrow \algo{Sign}_{BS}(\V{sk}, \algo{Blind}_{BS}(\mathcal{S}(\V{sk}), x)) \end{array} \right\}. \] \item \emph{unforgeability}: An adversary that requests $k$ signatures with $\algo{Sign}_{BS}$ -- cgit v1.2.3