diff --git a/whitepaper/zssp.pdf b/whitepaper/zssp.pdf index 7aa94e9..dab8db4 100644 Binary files a/whitepaper/zssp.pdf and b/whitepaper/zssp.pdf differ diff --git a/whitepaper/zssp.tex b/whitepaper/zssp.tex index 6a3e3f4..c722b8a 100644 --- a/whitepaper/zssp.tex +++ b/whitepaper/zssp.tex @@ -1197,7 +1197,7 @@ We are going to prove that the ZSSP header authentication algorithm is existenti \begin{flalign*} \prob[\algn{Auth}_{\mathcal{A},\, \Pi}(n) = 1] &\leq \mathbf{Adv}^\text{ind-prp}_{D,\,F}(n) + \prob[\algn{Vrfy}(N) = 1] \\ &\leq \algn{negl}(n) + \frac{8}{2^8}\cdot\frac{2^{24}}{2^{64}} \\ - &\leq \algn{negl}(n) + 2^{-5}\cdot 2^{-40} \\ + &= \algn{negl}(n) + 2^{-5}\cdot 2^{-40} \\ &= \algn{negl}(n) + 2^{-45}. \end{flalign*} If we assume the adversary does make oracle queries, then their advantage bound is only negligibly larger than the advantage above.