3 ms·
> privacy coins which deliver on the original cypherpunk goals of blockchain They don't deliver on one aspect, which is full auditability. I think all existing
by tromp 4y ago
> privacy coins which deliver on the original cypherpunk goals of blockchain
They don't deliver on one aspect, which is full auditability. I think all existing privacy chains are completely broken by knowledge of the discrete log of one particular curve point.
- tepitoperrito 4y agoI'm not sure I fully understand how XMR guarantees fungibility of its token, but I think a big part of it is the construction of ring signatures to prove transactions are zero sum, with a pool of participating signers that all have statistically valid plausible deniability. Start here maybe https://web.getmonero.org/resources/moneropedia/clsag.html https://web.getmonero.org/resources/moneropedia/clsag.html?
- tromp 4y agoI fully understand how privacy coins like XMT audit their supply. They assume that Pedersen commitments r*G+v*H can only be openend in one way. Which is false if the discrete log of H w.r.t. G is known. I said "I think" because there might by privacy coins not based on Pedersen commitments that I'm just not aware of.
- tepitoperrito 4y agoSure enough https://www.getmonero.org/resources/moneropedia/pedersen-commitment.html https://www.getmonero.org/resources/moneropedia/pedersen-com... Whelp, I'm gonna be bullish on some kind of move from cryptocurrency to a cypherpunk / plan9-esque Renaissance of distributed social computing, maybe taking ideas from e lang, and sprinkling in some web of trust auditable ledger if its appropriate and get the heck out of (web3) Dodge.