Quote from: eizh on April 29, 2014, 05:30:43 PM

Quote from: Simcom on April 29, 2014, 04:57:55 PM

I spent a fair amount of time thinking about the discussion with dime, humanitee, luigi1111, camosoul and others yesterday about the anonymity of Darksend. I suspected that the logic behind darksend as currently implemented was not sound, and I thought it would be best to determine how exactly darksend was working, and do an in-depth analysis of a mixing cycle and the transactions that follow mixing.

...

I pointed this out in mid-March and never got a response. It needs to be addressed.

Quote from: eizh on March 15, 2014, 05:52:28 AM

DarkSend question:

After a DarkSend, the change is sent back to a hidden change address to which I own the private key, but no one knows it's mine. But what if I later had to send an amount large enough that my wallet is forced to source it from multiple addresses including this change address? This could then reveal that the original sender address and the change address are connected. With the change amount known, the sent amount is also known and the recipient can be guessed more easily. Is this correct?

Yep, that is the exact scenario, I must have missed your post earlier. I am kinda late to the party here and have missed a lot of the early discussion. Hopefully we will get a response from Evan on this issue.