updated paper to solve NRP vulnerability

Signed-off-by: aritroCoder <[email protected]>

specs/anoncreds1/anoncreds.tex

@@ -603,11 +603,11 @@ \subsubsection{Final preparation}\label{sec:final}
 \widehat{o} &\leftarrow \widetilde{o} - c_H\cdot o\bmod{q}\\
 \widehat{c} &\leftarrow \widetilde{c} - c_H\cdot c\bmod{q} &
 \widehat{o'} &\leftarrow \widetilde{o'} - c_H\cdot o'\bmod{q}\\
-\widehat{m} &\leftarrow \widetilde{m} - c_H m\bmod{q} &
+\widehat{m} &\leftarrow \widetilde{m} + c_H m\bmod{q} &
 \widehat{m'} &\leftarrow \widetilde{m'} - c_H m'\bmod{q}\\
 \widehat{t} &\leftarrow \widetilde{t} - c_H t\bmod{q} &
 \widehat{t'} &\leftarrow \widetilde{t'} - c_H t'\bmod{q}\\
-\widehat{m_2} &\leftarrow \widetilde{m_2} - c_H m_2\bmod{q} &
+\widehat{m_2} &\leftarrow \widetilde{m_2} + c_H m_2\bmod{q} &
 \widehat{s} &\leftarrow \widetilde{s} - c_H s\bmod{q}\\
 \widehat{r} &\leftarrow \widetilde{r} - c_H r\bmod{q} &
 \widehat{r'} &\leftarrow \widetilde{r'} - c_H r'\bmod{q}\\
@@ -755,4 +755,8 @@ \subsubsection{Final hashing}\label{sec:finalhash}
  \item Proof of correctness for issuer's signature: steps 2.2.1, 2.2.2, 2.2.3.
  \item  Verification of correctness of signature: steps 3.1.0, 3.1.1, 3.1.2, 3.2.0, 3.2.1.
  \end{itemize}
+ \subsection{15 Nov 2023}
+ \begin{itemize}
+     \item Changed $\hat{m} \leftarrow \tilde{m} - c_H$ to $\hat{m} \leftarrow \tilde{m} + c_H$, and $\hat{m_2} \leftarrow \tilde{m_2} - c_H$ to $\hat{m_2} \leftarrow \tilde{m_2} + c_H$ in section 7.2.2.1, to fix possible revocation mix and match attack.
+ \end{itemize}
  }{}

specs/anoncreds1/anoncredsmain.tex

@@ -13,8 +13,8 @@
 \newcommand{\fullpaper}{}
 
 \title{Anonymous credentials with type-3 revocation}
-\author{Dmitry Khovratovich, Michael Lodder, Cam Parra}
-\date{25 April 2022, version 0.6}
+\author{Dmitry Khovratovich, Michael Lodder, Cam Parra, Aritra Bhaduri}
+\date{15 November 2023, version 0.7}
 
 \begin{document}