Quote from: Arlic on May 20, 2014, 05:19:48 PM

Quote from: lunokhod2 on May 19, 2014, 05:06:33 PM

Quote from: lunokhod2 on May 19, 2014, 08:31:26 AM

For info, here are the links to the zerocash project and paper. Have't yet had time to read them yet

http://zerocash-project.org/

http://zerocash-project.org/media/pdf/zerocash-extended-20140518.pdf

Hi gnos1s,

After skimming the Zerocash paper, I wonder if you could clear up a few points for us:

First, in your opinion, will it be possible to use zk-SNARKs to reduce the size of the zerocoin proof? The authors are not too clear on this point.

Second, will it be possible to choose the initial setup parameters for zerocash without relying on trusted third parties, such as with RSA-UFOs?

Finally, it is my understanding that the total amount encoded into zerocash can not be calculated, as the amount is hidden in the zerocash coin commitment. Would it be possible to create new coins (or perhaps double spend) without getting caught if the initial setup parameters were known? Or would this just let the person steal existing zerocash coins?

In my opinion, we need to do a very good job at explaining to the community the strengths and weaknesses of Zerocoin and Zerocash. If zerocash is released (which seems very likely), there is likely to be a mad dash to ditch zerocoin/anoncoin for zerocash. Many people are already referring to zerocash as "v2", with the implication that v2 is better than, and makes obsolete, v1....

I have asked him on profile page about your problem.
Next time try to ask at his profile:
https://bitcointalk.org/index.php?action=profile;u=247341

In some other situation that is ok to PM gnos1s,
but this time, all of us who are interested for same question can get answer, or not..