3 ms·
Strange to not cite the origin of the confidential transactions scheme. an early writeup: https://people.xiph.org/~greg/confidential_values.txt https://people.
by kanzure 9y ago
Strange to not cite the origin of the confidential transactions scheme.
an early writeup: https://people.xiph.org/~greg/confidential_values.txt https://people.xiph.org/~greg/confidential_values.txt
http://diyhpl.us/wiki/transcripts/gmaxwell-confidential-transactions/ http://diyhpl.us/wiki/transcripts/gmaxwell-confidential-tran... which is a transcript of https://www.youtube.com/watch?v=LHPYNZ8i1cU https://www.youtube.com/watch?v=LHPYNZ8i1cU
The actual borromean ring signature paper (compiled into pdf): http://diyhpl.us/~bryan/papers2/bitcoin/Borromean%20ring%20signatures.pdf http://diyhpl.us/~bryan/papers2/bitcoin/Borromean%20ring%20s...
Confidential transactions was later extended to confidential assets: https://blockstream.com/bitcoin17-final41.pdf https://blockstream.com/bitcoin17-final41.pdf and https://blog.chain.com/hidden-in-plain-sight-transacting-privately-on-a-blockchain-835ab75c01cb https://blog.chain.com/hidden-in-plain-sight-transacting-pri...
- doomrobo 9y agoYou're right. I should have at least included this reference: https://elementsproject.org/elements/confidential-transactions/ https://elementsproject.org/elements/confidential-transactio...
- nullc 9y agoFWIW, I've found it much easier when explaining people to first explain a pedersen commitment. Then explain how a pedersen commitment can be forged if you know the discrete log relating the two generators. Then I explain a chameleon hash function as a hash function where you can generate collisions if you know a trapdoor, which is just a pedersen forgery... then you feed the output of the chameleon into its input, and... and the result is a schnorr signature. So each idea builds on the last.