diff --git a/doc/paper/taler.tex b/doc/paper/taler.tex
index 7228a1274..47a17ccd5 100644
--- a/doc/paper/taler.tex
+++ b/doc/paper/taler.tex
@@ -1428,7 +1428,7 @@ information known by the merchant in the above.  As a result, this
 proves that our linking protocol \S\ref{subsec:linking} does not
 degrade privacy.  We note that the exchange could lie in the linking
 protocol about the transfer public key to generate coins that it can
-link (at a financial loss to the exchange that it would have to square
+link (at a financial loss to the exchange that it would have to share
 with its auditor).  However, in the normal course of payments the link
 protocol is never used.