Re: Official Anoncoin chat thread (including history)

With the exception of CryptoNote no other anon coin offers even a remote chance at real anonymity. Nothing but gimmicks.

I'm pretty stunned at how many people are paying big money for CrapCoins for gimmicks like DARK, BitcoinDark, etc...

What about the implementation of zero coin. I've heard that holds the real promise of anonymity

Both Zerocoin and Zerocash are abject trash until they demonstrate that the necessary key can be created in a trustless manner. I doubt that is possible. Even if it is, there will always be a degree of doubt. The consequences of such a key being retained and misused would be disastrous. Why even take the risk when there are other solutions without this issue? Perhaps zero knowledge proofs will have some applications, but a cryptocurrency is not one of them.

lol, what are you shilling for? Anoncoin is using RSA-UFO for a 100% trustless setup.

Source:
- https://wiki.anoncoin.net/RSA_UFO
- http://f3.tiera.ru/2/Cs_Computer%20science/CsLn_Lecture%20notes/I/Information%20and%20Communication%20Security,%202%20conf.,%20ICICS%2799(LNCS1726,%20Springer,%201999)(ISBN%203540666826)(334s)_CsLn_.pdf
- https://github.com/Anoncoin/ufo_client

Like I said, other solutions won't have any doubts regarding loopholes . I wouldn't touch any currency utilizing zero knowledge proofs with a ten foot pole.

If you dont understand something and if your scared, dont blame it on the technology. This is your fault after all.

Ok, as an example let's consider ring signatures. A solution that provides cryptographically guaranteed anonymity without the risk of keys that can create unlimited coins. Who in their right mind would prefer Zerocoin/Zerocash? Let's use a gas tank in a car as an analogy. Would you prefer a gas tank that has a hole, which has a metal plate welded over it, or one without any hole to begin with? The metal plate should theoretically prevent leaks, but who would choose it over a tank with no hole to begin with?

Hey there. You are 100% correct about zerocash. There is a major risk that the security keys could be compromised, and the worst part is that no one would even know it. This will be a major impediment to it being adopted.

However, Anoncoin is not implementing zerocash: They are implementing zerocoin, and the two are not the same. A very brief description of the differences between the two is given here: https://wiki.anoncoin.net/Zerocash.

I think that when you look into this in just a little more detail, that you will find there is no risk in zerocoin. The question is actually very simple. Zerocoin needs to generate a number N that is equal to the product of two prime numbers P and Q, all while not divulging P or Q to anyone, including the person that pick the number N. It turns out that you can in fact do this. Yes, the proof is a little technical (see Sander 1999), but it is not controversial. Zero-knowledge proofs are not controversial either, this is all well established, and if you have a bit of patience, you should be able to grasp the basics in this article: https://wiki.anoncoin.net/Zero-knowledge_proof

Lastly, ring signatures are good, but they do not really offer "anonymity". I think that this is the best on the market right now. However, how many signatures contribute to the ring signature? The probability of guessing who sent the transaction is simply 1 divided by this number.