diff --git a/doc/paper/taler.tex b/doc/paper/taler.tex
index 30f9934c3..0bc678f1c 100644
--- a/doc/paper/taler.tex
+++ b/doc/paper/taler.tex
@@ -997,8 +997,11 @@ maximum applicable tax is less than $\frac{2}{3}$, then $\kappa = 3$
 ensures that cheating results in a negative financial return on
 average as $\kappa - 1$ out of $\kappa$ attempts to hide from taxation
 are detected and penalized by a total loss.  This makes our use of
-cut-and-choose practical and efficient, and in particular faster
-than the comparable use of zk-SNARKs in ZeroCash~\cite{zerocash}.
+cut-and-choose practical and efficient, orders of magnitude faster
+than comparable proposed uses of zk-SNARKs in ZeroCash~\cite{zerocash}
+and orders of magnitude more more bandwidth efficient than
+comparable proposed uses of zero-knowledge proof in BOLT~\cite{BOLT}.
+% TODO: Mention Zerocash linkability ideas?
 
 % FIXME: I'm explicit about the rounds in postquantum.tex