diff --git a/protocol/protocol.tex b/protocol/protocol.tex
index 2ba77e0a..650141ce 100644
--- a/protocol/protocol.tex
+++ b/protocol/protocol.tex
@@ -10666,7 +10666,7 @@ Define $\hashtofield_{\XMDBlakeTwob}^{\typeexp{\GF{\ParamG{q}}\!}{2}}(\msg \type
 
 \introlist
 Let $\ParamG{\lambda}$ be any fixed nonsquare in $\GF{\ParamG{q}}$.
-Define $\sqrtratioG(\num, \xdiv) \typecolon \GF{\ParamG{q}} \times \GFstar{\ParamG{q}} \rightarrow \GF{\ParamG{q}}$ as follows:
+Define $\sqrtratioG(\num, \xdiv) \typecolon \GF{\ParamG{q}} \times \GFstar{\ParamG{q}} \rightarrow \GF{\ParamG{q}} \times \bit$ as follows:
 
 \begin{formulae}
   \item $\sqrtratioG(\num, \xdiv) = \begin{cases}
@@ -13969,6 +13969,7 @@ Peter Newell's illustration of the Jubjub bird, from \cite{Carroll1902}.
             \item Document that the use of $k = 256$ when extracting field elements
                   in $\hashtofield$ is intentional, despite the \pallasCurve only having
                   $126$-bit conjectured security against generic attacks.
+            \item Correct the output type of $\sqrtratioG$.
             \item Make the naming of $\enableSpends$ and $\enableOutputs$ consistent.
           \end{itemize}
     \item Correct the description of $\lengthField$ in \crossref{unifiedpaymentaddrencoding}.