Post
Topic
Board Altcoin Discussion
Re: I have come to the conclusion that "on chain anon" defeats the purpose.
by
TheFascistMind
on 08/10/2014, 12:41:14 UTC
Cross-posting...

1. You can't increase the key size of the historic chain.
2. Cracking historically spent coins is not a threat. The threat is cracking anonymity history at any time in the future.
3. The crack threats are not just due to key length. Key length won't help you in some cases against math discoveries, and certainly won't help against quantum computers.
4. Your heirs won't be dead in 10 - 15 years (or less or slightly more).
5. Why risk it when there are possible designs where you don't have to.

And those aren't the only inefficiencies in Cryptonote that can be eliminated with other possible designs.

As I wrote upthread, I never understood why people were so quick to jump on Cryptonote as the Holy Grail of anonymity.

Math discoveries in SOME cases lol okay like?

 Just because there is a way to somewhat shorten the amount of time it may take to crack a key or anonymity doesn't mean that it can't be mitigated in a simple way as using a longer key length.

Perhaps you forgot about the discovery of differential cryptanalysis that rendered all 1970s and 1980s crypto cracked (and no one knew it!).

Can't you read?

http://cacm.acm.org/news/170850-french-team-invents-faster-code-breaking-algorithm/fulltext#body-3

Quote
The Future

Barbulescu says the research group has considered trying to push its ideas to medium- and large-characteristic systems, "but there is a huge difficulty porting this algorithm to these other cases," he says. "But if we were able to extend it to large characteristic, then it would be an earthquake in cryptography because every time there is an improvement in discrete logarithm, there is a corresponding improvement in factorization (RSA), because the problems are similar."

Meanwhile, though, existing RSA-based systems should be considered secure. "There are some buzz articles floating around on the Web saying that this is the endgame for RSA," Thomé says. "It is wrong to say that."

The University of Waterloo's Menezes says he is not aware of any cryptosystems in use today that are suddenly at risk because of the work by the French team. However, he warns, "There will be faster algorithms, better implementations of the existing algorithm perhaps through special-purpose hardware, and better analysis. Maybe the algorithms are faster than we think they are."

Why can't you understand that once it is broken, you can't go back and hide the history on the block chain.

What ever you've already released to the block chain, is never going to get more secure. It WILL BE CRACKED SOMEDAY.

That is why do not put your anonymity on the block chain. Mix your inputs and outputs off chain, then put that in a transaction on the block chain (i.e. use CoinJoin).

Then the anonymity can never be cracked in the way it can be on chain with Cryptonote's ring signatures and Diffie-Hellman one-time private keys.

I hope I don't have to explain that again and again.

Just because someday it could be cracked doesn't mean it will be cracked you make as if everyone out there is gunning to destroy anonymity technology.

Sorry but if it takes 10 or 20 or 100 years to be cracked why would I really care? In that time I would likely have moved from one address to another and traded into and out of XMR or another CN coin or I would in the worst case be dead.

Anonymity has 0 value to me once I am dead and gone from this world.

With enough time and resources any thing can be cracked.... No surprise there lol

Why risk it when you don't have to? There are designs that don't risk it.

You can't predict when the crack will occur. It could be within a year or 20 years. But 100 years is much less likely. Think about what technology was like 100 years ago.

BCX, he isn't the sharpest tool in the shed.

You under estimate the power of cross chain transactions that aren't linked to any exchange.

Especially if the deal is done while in person where the correspondence of the trade is not recorded anywhere on the internet.

You are only thinking of yourself. Most people don't jump through hoops. They use a product and expect it to deliver what it promised as main feature.

If you can scare most of the people by attacking the low hanging fruit, society pisses on that coin forever after.

Edit: and as a developer, I don't want to be responsible for millions of people being subjected to State wrath some years from now.

You are asking me to be INTENTIONALLY cavalier, irresponsible and careless as a developer.