@ -1,4 +1,4 @@
\documentclass [8pt] { article}
\documentclass { article}
\RequirePackage { amsmath}
\RequirePackage { bytefield}
\RequirePackage { graphicx}
@ -7,6 +7,7 @@
\RequirePackage { xspace}
\RequirePackage { url}
\RequirePackage { changepage}
\RequirePackage { lmodern}
\setlength { \oddsidemargin } { -0.25in} % Left margin of 1 in + 0 in = 1 in
\setlength { \textwidth } { 7in} % Right margin of 8.5 in - 1 in - 6.5 in = 1 in
@ -315,7 +316,7 @@ $\CoinCommitRand$ are tokens randomly generated by the sender. Only a hash of
these values is disclosed publicly, which allows these random tokens to blind the
value and recipient \emph { except} to those who possess these tokens.
\subparagraph { In-band secret distribution}
\subsubsection { In-band secret distribution}
In order to transmit the secret $ \Value $ , $ \CoinAddressRand $ , and $ \CoinCommitRand $
(necessary for the recipient to later spend) and also a \memo to the recipient
@ -337,8 +338,12 @@ $\CryptoBoxSpecific$) \cite{cryptobox} as follows.
\end { bytefield}
\end { lrbox}
Define $ \Nonce ( i, \EphemeralPublic , \TransmitPublicNew { i } ) =
Define:
\begin { itemize}
\item [] $ \Nonce ( i, \EphemeralPublic , \TransmitPublicNew { i } ) =
\CryptoBoxSealHashbox { \noncebox } $ .
\end { itemize}
Let $ \TransmitPublicNew { 1 .. \NNew } $ be the Curve25519 public keys for the intended
recipient addresses of each new \coin , and let $ \Plaintext { 1 .. \NNew } $ be their
@ -376,7 +381,7 @@ given \PourDescription, and with the nonce for each ciphertext component dependi
on the index $ i $ . Also, $ \CryptoBoxSealHash $ (the full hash, not the compression
function) is used instead of $ \mathsf { blake 2 b } $ .
\subparagraph { Coin Commitments}
\subsubsection { Coin Commitments}
The underlying $ \Value $ and $ \SpendAuthorityPublic $ are blinded with $ \CoinAddressRand $
and $ \CoinCommitRand $ using the collision-resistant hash function $ \CRH $ in a
@ -415,7 +420,7 @@ multi-layered process. The resulting hash $\cm = \CoinCommitment{\Coin}$.
\end { aligned}
\end { equation*}
\subparagraph { Serial s}
\subsubsection { Serial number s}
A \serialNumber (denoted $ \sn $ ) equals
$ \PRFsn { \SpendAuthorityPrivate } ( \CoinAddressRand ) $ . A \coin is spent by proving