> Monero uses known, audited cryptographic primitives, elliptic curve Diffie-Hellman over curve25519, EdDSA signature over the twisted Edwards variant of the sa

> Monero uses known, audited cryptographic primitives, elliptic curve Diffie-Hellman over curve25519, EdDSA signature over the twisted Edwards variant of the same curve, libsodium. The cryptographic primitives in zcash are also audited. It's also the case that the cryptography underlying the next generation of zkSNARKs (which will be used by zcash) is the same as what Monero uses for range proofs; it's trustless (or low trust). > Monero uses zero-knowledge proofs for the range proof, cryptographically protects the sender, receiver and notional. Again, this is an over-simplification; the anonymity set is smaller, and moreover more difficult to analyze.