Post
Topic
Board Development & Technical Discussion
Re: coin mixing using Chaum's blind signatures
by
Ari
on 09/03/2013, 00:45:16 UTC
There's a limit to RSA blind signatures - if someone signs a bunch of small prime numbers, then multiplying these together yeilds a valid signature on the product.  Collect enough factors and you can sign anything.  So, if too many blind signatures are made, it effectively leaks the signing key.  Thus, the signing key needs to be changed each time, and you can only mix a limited number per batch.