diff options
author | Christian Grothoff <christian@grothoff.org> | 2022-06-26 15:05:37 +0200 |
---|---|---|
committer | Özgür Kesim <oec-taler@kesim.org> | 2022-06-26 17:09:33 +0200 |
commit | 2443ee672d9e7e9422bcfcadb5aedf87f0085839 (patch) | |
tree | 97b4338b3adafc231023b6c7ca930f2690c404db /doc/cs/content/4_2_specification.tex | |
parent | 7b62174d0073ee758fb5fcf8e21ff35cfc766c83 (diff) | |
download | exchange-2443ee672d9e7e9422bcfcadb5aedf87f0085839.tar.xz |
-more typos
Diffstat (limited to 'doc/cs/content/4_2_specification.tex')
-rw-r--r-- | doc/cs/content/4_2_specification.tex | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/doc/cs/content/4_2_specification.tex b/doc/cs/content/4_2_specification.tex index efe6a3c3d..fe745fc69 100644 --- a/doc/cs/content/4_2_specification.tex +++ b/doc/cs/content/4_2_specification.tex @@ -256,7 +256,7 @@ Further, the API ensures that a caller must generate two secret $r$ as in the Cl * To ensure unpredictability a new nonce should be used when a new r needs to be derived. * Uses HKDF internally. * Comment: Can be done in one HKDF shot and split output. - * + * * @param nonce is a random nonce * @param lts is a long-term-secret in form of a private key * @param[out] r array containing derived secrets r0 and r1 @@ -265,8 +265,8 @@ Further, the API ensures that a caller must generate two secret $r$ as in the Cl GNUNET_CRYPTO_cs_r_derive (const struct GNUNET_CRYPTO_CsNonce *nonce, const struct GNUNET_CRYPTO_CsPrivateKey *lts, struct GNUNET_CRYPTO_CsRSecret r[2]); - - + + /** * Extract the public R of the given secret r. * @@ -289,7 +289,7 @@ The blinding secrets are generated by a client who provides a secret as seed to * To provide abort-idempotency, blinding factors need to be derived but still need to be UNPREDICTABLE * To ensure unpredictability a new nonce has to be used. * Uses HKDF internally - * + * * @param secret is secret to derive blinding factors * @param secret_len secret length * @param[out] bs array containing the two derivedGNUNET_CRYPTO_CsBlindingSecret @@ -306,7 +306,7 @@ Further the Clause Blind Schnorr API provides an API to calculate the two blinde /** * Calculate two blinded c's * Comment: One would be insecure due to Wagner's algorithm solving ROS - * + * * @param bs array of the two blinding factor structs each containing alpha and beta * @param r_pub array of the two signer's nonce R * @param pub the public key of the signer @@ -336,7 +336,7 @@ See listing \ref{lst:crypto-sign-api}. * To ensure unpredictability a new nonce has to be used for every signature * HKDF is used internally for derivation * r0 and r1 can be derived prior by using GNUNET_CRYPTO_cs_r_derive - * + * * @param priv private key to use for the signing and as LTS in HKDF * @param r array of the two secret nonce from the signer * @param c array of the two blinded c to sign c_b @@ -370,7 +370,7 @@ GNUNET_CRYPTO_cs_unblind ( struct GNUNET_CRYPTO_CsS *signature_scalar); \end{lstlisting} -The verify API takes the message and its signature with the public key and returns GNUNET\_OK for a valid signature and GNUNET\_SYSERR otherwhise. +The verify API takes the message and its signature with the public key and returns GNUNET\_OK for a valid signature and GNUNET\_SYSERR otherwise. See listing \ref{lst:crypto-verify-api}. \begin{lstlisting}[style=bfh-c,language=C,, caption={GNUnet verify API}, label={lst:crypto-verify-api}] @@ -411,7 +411,7 @@ In crypto.c many utility functions are provided to create planchets (for planche One difference between \gls{RSABS} and \gls{CSBS} is, that the coin private key and RSA blinding secret can be created at the same point in time, since the RSA blinding secret is created randomly. However, for Clause Blind Schnorr secrets an additional step is needed, the public $R_0$ and $R_1$ are required to calculate the blinding seed to derive the secrets. -A planchet in the Clause Blind Schnorr Signature Scheme can be created as followed (implementation details ommited). +A planchet in the Clause Blind Schnorr Signature Scheme can be created as followed (implementation details omitted). \begin{enumerate} \item Create planchet with new \ac{EdDSA} private key |