Quote from: Simcom on September 27, 2014, 12:47:15 AM

Quote from: rsa_ufo_attack on September 26, 2014, 10:26:17 PM

Quote from: SmokingSkull on September 26, 2014, 08:49:31 AM

Quote from: rhader on September 26, 2014, 08:32:33 AM

Whats the difference between zerocash and zerocoin? As far as im aware SDC is in the process of implementing zerocash into their anon system.

Zerocash is not yet fully developed - Miers and Green are not done with the code as far as I know, they wanted to release the Coin this time around, but who knows, nobody knows anything about it, so any Coin who says they implement Zerocash is basically ... lying.

Zerocoin will be implemented by the Anoncoin Devs, (with RSA UFOs, the original idea was without them), we dont know of any particular Coin with a real approach to implement it, at least nobody is doing the coding correctly (mostly they add the "ZC" branch to their source and that's it) Here in Anoncoin the Devs are really working on it (see source)

The technical differences between Zerocoin and Zerocash are in the wiki ... please read about it here

https://wiki.anoncoin.net/Anoncoin_Wiki

Further proof that you know nothing about Zerocoin/cash. RSA UFO idea is from the original zerocoin whitepaper:
http://spar.isi.jhu.edu/~mgreen/ZerocoinOakland.pdf

Ian Miers and his team abandoned Zerocoin to do an improved project called Zerocash.
Zerocash improves on an earlier protocol, Zerocoin, developed by some of the same authors, both in functionality (Zerocoin only hides a payment's origin, but not its destination or amount) and in efficiency (Zerocash transactions are less than 1KB and take less than 6ms to verify).

and they will do that in a REAL trustless manner:
In contrast to Bitcoin's transactions, payment transactions using the Zerocash protocol do not contain any public information about the payment's origin, destination, or amount; instead, the correctness of the transaction is demonstrated via the use of a zero-knowledge proof.

Source: http://zerocash-project.org/

If only they could generate the initial parameters in a trustless manner. NOBODY who cares about privacy is going to use a coin created by academic researcher funded by the US Department of defense in a system where TRUST must be given to the devs to throw away the master key. That is why zerocoin is superior. Yes there will be bloat issues, Yes the transactions are slower. But at least we will have trustless anonymity with RSA UFOs used to generate the initial parameters. All of zerocash's advantages are for nothing if the gov't has a private key that unlocks all anonymity and enables unlimited minting of coins.

Well put. One minor correction though: an attacker with the master key cannot de-anonymize everyone (apart from software backdoors or flaws), but IMO, having such an attacker be able to erase a currency's value whenever they want is bad enough to avoid using Zerocash.