From ae923abfc9fca770b92c2fb2694244f01ae35110 Mon Sep 17 00:00:00 2001 From: Florian Dold Date: Tue, 25 Sep 2018 10:02:52 +0200 Subject: missing subscripts --- taler-fc19/paper.tex | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/taler-fc19/paper.tex b/taler-fc19/paper.tex index 7515627..f84f118 100644 --- a/taler-fc19/paper.tex +++ b/taler-fc19/paper.tex @@ -975,18 +975,18 @@ Using these primitive, we now instantiate the syntax: x_i' &\leftarrow \algo{Kx}(t_i, \V{pkCoin}_0)\\ (\V{skCoin}_i', \V{pkCoin}_i') &\leftarrow \algo{KeyGen}^*_{CSK}(x_i', 1^\lambda) \\ - h_T' &:= H(T'_1, \dots, T_{\gamma-1}, T_\gamma, T_{\gamma+1}', \dots, T_\kappa') + h_T' &:= H_{pk}(T'_1, \dots, T_{\gamma-1}, T_\gamma, T_{\gamma+1}', \dots, T_\kappa') \end{align*} and simulates the blinding protocol with recorded transcripts (without signing each message, as indicated by the dot ($\cdot$) instead of a signing secret key), obtaining \begin{align*} (\overline{m}_i', r_i', \mathcal{T}_i) &\leftarrow - \algo{Blind}^*_{BS}(\mathcal{S}(\V{skD}_u), \mathcal{R}(H(x_i'), \cdot, \V{pkD}_u, \V{skCoin}_i))\\ + \algo{Blind}^*_{BS}(\mathcal{S}(\V{skD}_u), \mathcal{R}(x_i', \cdot, \V{pkD}_u, \V{skCoin}_i))\\ \end{align*} and finally \begin{align*} - h_{\overline{m}}' &:= H(\overline{m}_1', \dots, \overline{m}_\gamma, \dots, \overline{m}_\kappa')\\ - h_C &:= H(h_T' \Vert h_{\overline{m}}'). + h_{\overline{m}}' &:= H_{pk}(\overline{m}_1', \dots, \overline{m}_\gamma, \dots, \overline{m}_\kappa')\\ + h_C &:= H_{pk}(h_T' \Vert h_{\overline{m}}'). \end{align*} For each $i \ne \gamma$, the exchange computes -- cgit v1.2.3