slight clarifications

This commit is contained in:
Christian Grothoff 2015-05-09 19:37:54 +02:00
parent 5004fce6ca
commit 15c4126295

View File

@ -866,11 +866,11 @@ a fresh coin $\widetilde{C}$ with the same denomination. In the protocol, $\kapp
\item randomly generates blinding factors $b_i$, \item randomly generates blinding factors $b_i$,
\item computes $E_i := E_{K_i}\left(c_s^{(i)}, b_i\right)$ where $K_i := c'_s \cdot T_p^{(i)}$ (The encryption key $K_i$ is \item computes $E_i := E_{K_i}\left(c_s^{(i)}, b_i\right)$ where $K_i := c'_s \cdot T_p^{(i)}$ (The encryption key $K_i$ is
computed by multiplying the private key $c'_s$ of the original coin with the point on the curve computed by multiplying the private key $c'_s$ of the original coin with the point on the curve
that represents the public key of the transfer key $T^{(i)}$.), that represents the public key $T^{(i)}_p$ of the transfer key $T^{(i)}$.),
\end{itemize} \end{itemize}
and commits $\langle C', \vec{T}, \vec{C}, \vec{b} \rangle$ to disk. and commits $\langle C', \vec{T}, \vec{C}, \vec{b} \rangle$ to disk.
\item The customer computes $B_i := E_{b_i}(C^{(i)}_p)$ and sends commitments \item The customer computes $B_i := E_{b_i}(C^{(i)}_p)$ for $i=1,\ldots,\kappa$ and sends a commitment
$S_{C'}(\vec{E}, \vec{B}, \vec{T}))$ for $i=1,\ldots,\kappa$ to the mint; $S_{C'}(\vec{E}, \vec{B}, \vec{T_p}))$ to the mint;
here $E_{b_i}$ denotes Chaum-style blinding with blinding factor $b_i$. here $E_{b_i}$ denotes Chaum-style blinding with blinding factor $b_i$.
\item The mint generates a random $\gamma$ with $1 \le \gamma \le \kappa$ and \item The mint generates a random $\gamma$ with $1 \le \gamma \le \kappa$ and
marks $C'_p$ as spent by committing marks $C'_p$ as spent by committing