commit 5eda8c850815ca48d08e07d2e2286cdfe89638d9
parent 3270cce0d6a2c0ea0e8696519c967d56dd7b7fd0
Author: Özgür Kesim <oec-taler@kesim.org>
Date: Tue, 10 Jan 2023 19:03:00 +0100
-mention the private keys of the derived age commitments
Diffstat:
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/design-documents/024-age-restriction.rst b/design-documents/024-age-restriction.rst
@@ -409,7 +409,9 @@ For the age commitment, calculate:
q_a &:= \text{Edx25519\_derive\_public}(P, f_a).
Then the vector :math:`\vec{q} = \{q_1,\ldots,q_M\}` is then the age commitment
-associated to private key :math:`c_s`.
+associated to the coin's private key :math:`c_s`. For the non-disclosed coins,
+the wallet can use the vector :math:`(p_1,\ldots,p_m,\bot,\ldots,\bot)` of
+private keys for the attestation.
Provided with the private key :math:`c_s`, the exchange can therefore calculate
the blinding :math:`\beta` and the age commitment :math:`\vec{q}` itself, along