From 30f0214603735b3ab49d637b02501d7d68b3461b Mon Sep 17 00:00:00 2001 From: claylock Date: Thu, 26 Oct 2023 18:38:03 +0000 Subject: [PATCH] Edited ch08_signatures.adoc with Atlas code editor --- ch08_signatures.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ch08_signatures.adoc b/ch08_signatures.adoc index 1cdae66d..94c67f6c 100644 --- a/ch08_signatures.adoc +++ b/ch08_signatures.adoc @@ -444,7 +444,7 @@ Bob waits to receive Alice's public nonce actual equation the impersonator simply chooses a random number for _s_, generates _sG_, and then uses EC subtraction to select a _kG_ that equals _kG_ = _sG_ – _exG_. They give Bob their calculated _kG_ and later their random - _sG_, and Bob thinks that's valid because _sG_ == (_sG_ – _exG_) + _exG_. + _sG_, and Bob thinks that's valid because [.keep-together]#_sG_ == (_sG_ – _exG_)# + _exG_. This explains why the order of operations in the protocol is essential: Bob must only give Alice the challenge scalar after Alice has committed to her public nonce.