aboutsummaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
Diffstat (limited to 'doc')
-rw-r--r--doc/paper/taler.tex17
1 files changed, 9 insertions, 8 deletions
diff --git a/doc/paper/taler.tex b/doc/paper/taler.tex
index 4e6cb0505..6fa0df882 100644
--- a/doc/paper/taler.tex
+++ b/doc/paper/taler.tex
@@ -277,19 +277,20 @@ Chaum's original digital cash system~\cite{chaum1983blind} was
extended by Brands~\cite{brands1993efficient} with the ability to {\em
divide} coins and thus spend certain fractions of a coin using
restrictive blind signatures. Restrictive blind signatures create
-privacy risks: if a transaction is interrupted, then any coins sent to
-the merchant become tainted, but may never arrive or be spent. It
-becomes tricky to extract the value of the tainted coins without
+privacy risks: if a transaction is interrupted, then any coins sent
+to the merchant become tainted, but may never arrive or be spent.
+It becomes tricky to extract the value of the tainted coins without
linking to the aborted transaction and risking deanonymization.
Ian Goldberg's HINDE system allowed the merchant to provide change,
but the mechanism could be abused to hide income from
taxation.\footnote{Description based on personal communication. HINDE
- was never published.} $k$-show
-signatures~\cite{brands1993efficient} were proposed to achieve
-divisibility for coins. However, with $k$-show signatures multiple
-transactions can be linked to each other. Performing fractional
-payments using $k$-show signatures is also rather expensive.
+ was never published.}
+In \cite{brands1993efficient}, $k$-show signatures were proposed to
+achieve divisibility for coins. However, with $k$-show signatures
+multiple transactions can be linked to each other.
+Performing fractional payments using $k$-show signatures is also
+rather expensive.
%
%Some argue that the focus on technically perfect but overwhelmingly