From 41747eecd2594ebbdca9559149085622a30f7909 Mon Sep 17 00:00:00 2001
From: Florian Dold <florian.dold@gmail.com>
Date: Tue, 25 Sep 2018 11:12:48 +0200
Subject: clarification

---
 taler-fc19/paper.tex | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/taler-fc19/paper.tex b/taler-fc19/paper.tex
index 63695db..0022e26 100644
--- a/taler-fc19/paper.tex
+++ b/taler-fc19/paper.tex
@@ -936,7 +936,7 @@ Using these primitives, we now instantiate the syntax:
     depending on the commitment:
     \begin{enumerate}
       \item if the exchange did not see $\pi_1$ before, it marks $\V{pkCoin}_0$
-        as spent for $D(\V{pkD}_u)$, chooses a uniform random $0 \le \gamma < \kappa$, stores it,
+        as spent for $D(\V{pkD}_u)$, chooses a uniform random $0 \le \gamma < \kappa$, stores it under $\pi_1$,
         and sends this choice in a signed message $(\gamma, \V{sig}_2)$ to the customer,
         where $\V{sig}_2 \leftarrow \algo{Sign}_{S}(\V{skESig}, \gamma)$.
       \item otherwise, the exchange sends back the same $\pi_2$ as it sent for the last
-- 
cgit v1.2.3