commit 30d58cb4260d0701913dd3f5e7bb7422427579f1
parent fcac7311dc01b58e3252bfdaf42c642a34d08089
Author: Christian Grothoff <christian@grothoff.org>
Date: Tue, 22 Apr 2025 15:03:30 +0200
-clarify
Diffstat:
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/design-documents/062-pq-refresh.rst b/design-documents/062-pq-refresh.rst
@@ -83,8 +83,9 @@ fresh coins from a dirty coin is as follows:
t = Hash1a("Refresh", Cp, r, pkDs, meta)
s = SignDeterministic(cs, t)
for i, pkD in enumerate(pkDs):
- x[i] = Hash1b(s, i) # Note: can be done with one HKDF for all i
- b[i] = Hash2(s, i) # Note: can be done with one HKDF for all i
+ x[i] = Hash1b(s, i) # Note: use one HKDF for all i
+ b[i] = Hash2(s, i) # Note: use one HKDF for all i
+ for i, pkD in enumerate(pkDs):
c2_s[i], C2_p[i] = KeyGen(x[i])
m[i] = Blind(C2_p[i], b[i], pkD)
return (s, c2_s, C2_p, m)