Quote from: o_e_l_e_o on September 12, 2022, 12:01:36 PM

Quote from: witcher_sense on September 12, 2022, 11:43:31 AM

-snip-

What you've written is correct for Wasabi coinjoins, but their new WabiSabi protocol is different. You can read the full technical paper here: https://github.com/zkSNACKs/WabiSabi/releases/latest/download/WabiSabi.pdf. You can also read a simplified explanation here: https://github.com/zkSNACKs/WabiSabi/blob/master/explainer.md. WabiSabi does not place constrictions on transactions having equal amounts as the original Wasabi coinjoin protocol does, and uses Pedersen commitments to hide the input amounts.

Credit where it is due, what they have come up with is impressive, but unfortunately it is rendered completely useless by their surveillance and censorship.

I wouldn't say that I fully understand the mathematics behind input registration, but, as far as I understand, using homomorphic Pedersen commitments adds an additional layer of protection against a malicious CoinJoin coordinator trying to map inputs and outputs. Because hiding input amounts itself during input registration doesn't make those inputs invisible; amounts are anyway revealed once the transaction is constructed and broadcast to the network. Moreover, as you have pointed out and zkSNACKs CEO Max Hillebrand confirmed in this interview:

Quote from: https://stephanlivera.com/episode/364/

technically how this is gonna work is that during input registration or at the end of input registration, an API request is made to the chain surveillance firm, and then you see which inputs are not allowed or blacklisted, and these then get a response from the coordinator with, Sorry, we could not allow your coin to be registered because of these reasons.

Inputs are being handed over to a chain surveillance firm even before the input registration phase, so both chain analysis and a coordinator will know which inputs are willing to partake in a CoinJoin transaction. In other words, users' identity is compromised beforehand, and other anonymization techniques used during actual CoinJoin don't make much sense.

Quote from: n0nce on September 12, 2022, 01:32:08 PM

I do know that you can do 'hardware wallet coinjoins' with a Passport device (probably others, too) and Samourai Whirlpool, through Sparrow Wallet, already since last year.
https://nitter.it/SparrowWallet/status/1441049974934892553

"Mixing directly to a hardware wallet" is not what I meant. But it's good to know that such an option exist.