diff --git a/protocol/protocol.tex b/protocol/protocol.tex
index e24b2ce9..1ade8609 100644
--- a/protocol/protocol.tex
+++ b/protocol/protocol.tex
@@ -529,6 +529,7 @@
 \newcommand{\ZKJoinSplit}{\mathsf{ZK}_{\JoinSplit}}
 \newcommand{\ZKJoinSplitVerify}{\ZKJoinSplit\mathsf{.Verify}}
 \newcommand{\ZKJoinSplitProve}{\ZKJoinSplit\mathsf{.Prove}}
+\newcommand{\ZKJoinSplitProof}{\ZKJoinSplit\mathsf{.Proof}}
 \newcommand{\Proof}{\pi}
 \newcommand{\JoinSplitProof}{\Proof_{\JoinSplit}}
 \newcommand{\zkproof}{\mathtt{zkproof}}
@@ -1365,7 +1366,7 @@ where
   \item $\h{\allOld} \typecolon (\PRFOutput)^{\NOld}$ is
         a sequence of tags that bind $\hSig$ to each
         $\AuthPrivate$ of the input \notes;
-  \item $\JoinSplitProof \typecolon \ZKProof$ is
+  \item $\JoinSplitProof \typecolon \ZKJoinSplitProof$ is
         the \zeroKnowledgeProof for the \joinSplitStatement;
   \item $\TransmitCiphertext{\allNew} \typecolon (\Ciphertext)^{\NNew}$ is
         a sequence of ciphertext components for the encrypted output \notes.