From fa2b1c6ce9d24fc1174390e651c83ced9fb8ab44 Mon Sep 17 00:00:00 2001
From: Daira Hopwood <daira@jacaranda.org>
Date: Fri, 26 Mar 2021 15:44:27 +0000
Subject: [PATCH] Correct the output type of sqrt_ratio.

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
---
 protocol/protocol.tex | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/protocol/protocol.tex b/protocol/protocol.tex
index 2ba77e0a..650141ce 100644
--- a/protocol/protocol.tex
+++ b/protocol/protocol.tex
@@ -10666,7 +10666,7 @@ Define $\hashtofield_{\XMDBlakeTwob}^{\typeexp{\GF{\ParamG{q}}\!}{2}}(\msg \type
 
 \introlist
 Let $\ParamG{\lambda}$ be any fixed nonsquare in $\GF{\ParamG{q}}$.
-Define $\sqrtratioG(\num, \xdiv) \typecolon \GF{\ParamG{q}} \times \GFstar{\ParamG{q}} \rightarrow \GF{\ParamG{q}}$ as follows:
+Define $\sqrtratioG(\num, \xdiv) \typecolon \GF{\ParamG{q}} \times \GFstar{\ParamG{q}} \rightarrow \GF{\ParamG{q}} \times \bit$ as follows:
 
 \begin{formulae}
   \item $\sqrtratioG(\num, \xdiv) = \begin{cases}
@@ -13969,6 +13969,7 @@ Peter Newell's illustration of the Jubjub bird, from \cite{Carroll1902}.
             \item Document that the use of $k = 256$ when extracting field elements
                   in $\hashtofield$ is intentional, despite the \pallasCurve only having
                   $126$-bit conjectured security against generic attacks.
+            \item Correct the output type of $\sqrtratioG$.
             \item Make the naming of $\enableSpends$ and $\enableOutputs$ consistent.
           \end{itemize}
     \item Correct the description of $\lengthField$ in \crossref{unifiedpaymentaddrencoding}.