It is BS to claim that Zerocoin is not analogous to mixing. The anonymity set is reduced by the timing of coining and destruction of each zerocoin.

Otherwise you put the entire block chain into a mix as Zerocash does, but then (I think but I'm not 100% sure) you have the problem that double-spends can't be reverted individually (i.e. afaik there is no coin id to associate two spends on two forks), you have to revert entire blocks which means a 51% attack is an all-of-nothing affair and I speculate that my solution to the selfish-mining attack (otherwise only 25% of hashrate needed to attack a coin) doesn't work for something like Zerocash.

Also my calculation is that neither Zerocoin nor Zerocash can scale to global transaction volume, especially when you factor in micro payments over social networking.

Also I don't think cryptographers would agree that such a new and complex cryptography is proven until it has been vetted for a decade or so.


Correct knowledge is more valuable than useless pride.