[taler-anastasis] 05/06: legend

[gnunet]

This is an automated email from the git hooks/post-receive script.

grothoff pushed a commit to branch master
in repository anastasis.

commit 234a3809dc6349f9aa4f5db148090d475f212ad8
Author: Christian Grothoff <christian@grothoff.org>
AuthorDate: Thu Jun 11 10:57:34 2020 +0200

    legend
---
 doc/thesis/design.tex | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/doc/thesis/design.tex b/doc/thesis/design.tex
index 14ce073..3736348 100644
--- a/doc/thesis/design.tex
+++ b/doc/thesis/design.tex
@@ -26,7 +26,7 @@ Figure~\ref{fig:truth_keys} on page~\pageref{fig:truth_keys}.
 The Figure~\ref{fig:keys_anastasis} gives an overview of the keys used in 
Anastasis. It also shows how they are created and used.
 Figure~\ref{fig:truth_keys} shows how the keys to sign the (encrypted) truth
 data used during authentication are generated. The seed(s) used in
-Figure~\re{fig:truth_keys} are part of the recovery document.
+Figure~\ref{fig:truth_keys} are part of the recovery document.
 \newline
 \begin{figure}[H]
        \centering
@@ -81,12 +81,16 @@ page~\pageref{fig:keys_anastasis} are explained:
 \noindent In the following the keys shown in the Figure~\ref{fig:truth_keys} on
 page~\pageref{fig:truth_keys} are explained:
 \begin{description}
+\item[truth seed] {Clients generate a {\em random truth} seed for each truth
+  which is stored in the encrypted recovery document.}
 \item[private truth key] {{\em Private keys} are derived per truth upload. They
   are used to sign the uploaded data. This way, the escrow provider
   can later prove that they preserved the data correctly. We use EdDSA for
   the signatures.}
 \item[public truth key] {{\em Public keys} are used to identify the truth
-  in the provider's database. Providers only store the first valid }
+  in the provider's database. Providers only store the first truth upload with
+  a valid signature. Changes to truth are thus not possible, clients must
+  create a fresh seed for every upload.}
  \end{description}
 
 

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.