> We leverage an indistinguishability-based anonymity notion for sender anonymity: the adversaryhas to distinguish two senders of its own choosing Bi

> We leverage an indistinguishability-based anonymity notion for sender anonymity: the adversaryhas to distinguish two senders of its own choosing Bitcoin doesn't provide that; a transaction involving one wallet can (if I understand Bitcoin correctly) be distinguished from a transaction involving a different wallet trivially. It has anonymity only in that personal information is not required, but all the information you do provide (that is, the key that identifies your wallet) is entirely public. A wallet is a pseudonym. The anonymity of Bitcoin is not the cause of its latency - instead, getting anonymity out of Bitcoin requires extra work by the user (making more wallets, and transferring money between them to avoid having to cluster them all in a multi-input transaction that would identify them all as probably belonging to one person). Getting anonymity would thus require an increase in both latency and bandwidth (from the extra transactions plus any other money-laundering work).