4 ms·
> The schemes Zcash and Monero use have never been tested at scale with a sophisticated adversary Monero's ring signatures are not the same as ZCash's zero-kno
by klntsky 3y ago
> The schemes Zcash and Monero use have never been tested at scale with a sophisticated adversary
Monero's ring signatures are not the same as ZCash's zero-knowledge crypto. Monero obfuscates, but ZCash hides completely, cryptographically.
https://z.cash/learn/is-zcash-traceable/ https://z.cash/learn/is-zcash-traceable/
- acdha 3y agoThat’s the hope anyway - even if the cryptography is perfect against all future attacks (remember they’ve already had at least one flaw in earlier versions) there are still things like timing attacks: https://crypto.stanford.edu/timings/ https://crypto.stanford.edu/timings/ Nation states are some of hardest attackers since they can do things like monitoring network traffic to correlate with chain activity or compel some fraction of the participants to surrender data. I know some smart people work on Zcash but there’s no safety net when all of the transactions are public and immutable.