Re: ZeroVert - First Zerocoin Implementation | New gold standard for privacy
Quote
Using the RSA modulus from world renowned RSA factoring challenge of unknown factorization
http://en.wikipedia.org/wiki/RSA_Factoring_Challenge
Right, but can you explain how you did the trustless setup to establish the accumulator? And also what trustless entities exactly were included in the setup, as right now it's impossible to verify that anyone except you has generated the accumulator? That's a rather important point as it would allow you to spend anyone's money otherwise, without anyone possibly being able to tell it was you doing so. It seems confusing to me how you possibly got the niZKP down to a reasonable size and verification time, too, for instance they're 128-256 kb in the default implementation, with verification times of 4 or more seconds each.
The accumulator requires an RSA modulus of unknown factorization, so we used the RSA modulus of unknown factorization from the world renowned RSA factoring challenge.
We implement zerocoin, not zerocash. And yes, we said generating transaction is less than a second, with verification time less than a minute