3 ms·
As much as I appreciate the sentiment, ring signatures are not a perfect solution for sender privacy at the moment given current ringsizes. Almost every crypto
by cowtools 4y ago
As much as I appreciate the sentiment, ring signatures are not a perfect solution for sender privacy at the moment given current ringsizes.
Almost every cryptocurrency with sender-obfuscation features bumps up against "poisoned output" attacks for low enough anonymity sets: https://www.youtube.com/watch?v=iABIcsDJKyM https://www.youtube.com/watch?v=iABIcsDJKyM
But it is good enough for many purposes. The goal is to provide a high level of plausible deniability for the sender.
- gillesjacobs 4y agoYou'll be glad to hear Monero increased its ring-size from 11 to 16 last month making such attacks less feasible. I sure was.