Details-on-ARKG-instance-output

[AltmannPeter]

This is a first draft of text that exemplifies what I meant with clarifying the use of the blind tau. It is not possible to use a generic approach for all keys since the keys differ based both on use and curve.

[emlun]

I think this misunderstands the layout of the document. This section is about the structure of ARKG in the abstract, it is not tied to any particular instantiation and in particular has nothing to do with elliptic curves. It does not have to be true in general that "each blinding key is also a private key" - that depends entirely on the instantiation of the BL parameter. It is true when BL is based on ECC, but not necessarily in general.

If anything this text should rather be in section 3, but even then I don't think I understand what you mean by "clarifying the use of the blind tau".

[AltmannPeter]

Changed the text to reflect the above comment.

I don't think I understand what you mean by "clarifying the use of the blind tau".

Given the layout clarification, my comment is not relevant for this section. We need to find a place where we can clarify that tau, once generated, will then be used differently when generating keys for a particular procedure over a particular group.

[emlun]

I don't think the example needs to be quite so specific, I think it's fine as is. 🙂