add reference to zerocash

1 files changed, 4 insertions, 3 deletions

diff --git a/doc/paper/taler.tex b/doc/paper/taler.tex
index fd9fbeac5..aa0edaca6 100644
--- a/doc/paper/taler.tex
+++ b/doc/paper/taler.tex
@@ -344,7 +344,7 @@ secure and that each participant is under full control of his system.
 The contact information of the exchange is known to both customer and
 merchant from the start.  We further assume that the customer can
 authenticate the merchant, e.g. using X.509
-certificates~\cite{rfc5280}.  Finally, we assume that customer has an
+certificates~\cite{rfc6818}.  Finally, we assume that customer has an
 anonymous bi-directional channel, such as Tor, to communicate with
 both the exchange and the merchant.
 
@@ -805,8 +805,9 @@ protocol does not need to provide cryptographic security: If the
 maximum applicable tax is less than $\frac{2}{3}$, then $\kappa = 3$
 ensures that cheating results in a negative financial return on
 average as $\kappa - 1$ out of $\kappa$ attempts to hide from taxation
-are detected and penalized by a total loss.  This makes the use of
-cut-and-choose practical and efficient in this context.
+are detected and penalized by a total loss.  This makes our use of
+cut-and-choose practical and efficient, and in particularly faster
+than the comparable use of zk-SNARKs in ZeroCash~\cite{zerocash}.
 
 % FIXME: I'm explicit about the rounds in postquantum.tex