Quote from: TierNolan on June 10, 2015, 06:13:13 PM

Quote from: DumbFruit on June 10, 2015, 06:02:39 PM

Since this hides transaction amounts doesn't this make CoinJoin impossible at the same time?

The output "values" are random looking curve points and proofs that they are within range.

You can move them around just like normal coinjoin outputs. You just have to keep the output value and proof as a single unit.

Two sets of fees can be added together too to give one fee output.

This means that you can do coinjoin without having to have all the outputs the same amount.

I don't understand how that works. CoinJoin works by rearranging input such that the output values remains the same. If the inputs values are unknown, how could that be calculated?

Quote from: gmaxwell on August 22, 2013, 02:32:31 AM

To use this to increase privacy, the N users would agree on a uniform output size and provide inputs amounting to at least that size.

Edit: You can ignore me, it's going to take me a while to wrap my head around this, if I ever manage it. If this protocol does what it says it does, then this is probably the biggest innovation to Bitcoin since.. well.. Ever.

Edit2: Speaking of which, is this going to make it to Bitcoin core or is this expected to remain on a sidechain?