Re: [Taler] G the generator

[Fabian Kirsch]

Hi Luis,

"DH + Encryption by K_i" is used to build the link-Message.
So (T_p, E) is a message, which can be read by anyone knowing c'_s.

And such message could be created by anyone using C_p.
After all that is a selfbrew asymetric crypto. Sending (c_s, b) to C'.

I am going to write it down more clearly after dinner.

See you
  Fabian

Am 03.10.2015 um 17:14 schrieb Luis Ressel:
> [..]
> Encryption is not needed at all, I guess you meant "signature scheme".
> Also, in the linking protocol, the private coin keys are used in a
> DH-like manner, so there are in fact some additional requirements.
>
> Regards,
> Luis Ressel