Quote from: ByteCoin on August 15, 2010, 03:12:09 AM

What are the desireable properties of a blinded public key which are not achievable by generating a new public key? I'm not clear on what were trying to do.

Both ways solve the problem equivalently. But if my understanding of the operation of blinded public keys is correct, it means the number of public keys each user would have to store in his wallet is minimized.

Quote from: ByteCoin on August 15, 2010, 03:12:09 AM

Quote from: satoshi on August 13, 2010, 07:28:47 PM

As an example, say some unpopular military attack has to be ordered, but nobody wants to go down in history as the one who ordered it. If 10 leaders have private keys, one of them could sign the order and you wouldn't know who did it.

Obviously this could be achieved by them all having the same keys but that's presumably unsuitable for some reason. It looks like you're trying to hide some information while trying to make it still available for other people or under certain circumstances but I'm not sure what.

I'm not exactly sure of this particular use case, but it doesn't have any bearing on the proposed solution.