I've read up a bit on blinded signatures, Brands, etc. I have two problems there. First, I would need a reference standard implementation of blinded signature

I've read up a bit on blinded signatures, Brands, etc. I have two problems there. First, I would need a reference standard implementation of blinded signatures. I know if I tried to cobble something together myself, some crypto-guru would laugh and point out that my prime factors weren't super-prime in a Zeta field of modulus three or some such thing. Second, basic blinding still does require a central server. I believe the Brands protocol allows blinded tokens to circulate without contact with the server at every stage, and anyone who attempts a double-spend can be identified cryptographically. But it's complicated and ultimately relies on the technique of going after the bad guy with a baseball bat. So if I went with blinded tokens on a central server, I'd be right back at the central server problem. Blinding provides un-traceability at the cryptographic protocol layer. With Loom, I figured that anyone that concerned with un-traceability could just use a VPN or Tor.