Quote from: FudandShort on December 17, 2014, 01:20:38 AM

Quote from: Wheatclove on December 16, 2014, 10:29:39 PM

Quote from: FudandShort on December 16, 2014, 09:44:06 PM

Quote from: battbot on December 16, 2014, 08:42:05 PM

Quote from: FudandShort on December 16, 2014, 08:14:31 PM

How can anyone be sure that there are no "phantom tokens"? Who is going to control the creation of these tokens? Is it all based on trust, are you serious? wtf
EDIT: zero knowledge proofs require a trusted setup. This allows the person who set up the system to create tokens at will if they didn't destroy the setup parameters.
this is why zero cash can't work.
It's the same problem with zero vert.

https://eprint.iacr.org/2006/389.pdf

You answered my question by citing Fujisaki.

The Fujisaki paper is basis for traceability in cryptonote ring signatures. The shadow token paper clearly describes a trusted ("special") setup to create an oracle as two hash functions. It is a deal breaker for true anonymity because it requires you to trust the person who set it up.

This is the exact same problem with all "zero coins". They require a trusted setup.

Section 3.1.1 of the Shadow whitepaper debunks your claim.

You don't have zero knowledge implemented yet.

What do you have then? You have a ring signature token system that uses the same signature system as cryptonote. It's true that it is a new implementation. However, there is this cumbersome condition: "The ring signature consists of the public key of the token being spent, plus the public keys from 3 to 200 other tokens of the same value as the token being spent."

So to spend a given amount of shadow coin as shadow token, you have to find in the blockchain 3 - 200 tokens of the same size that you want to spend.

I can think of a way to tokenize shadow where you can spend in any denomination:
1. Send shadowcoin to an exchange
2. Trade it for XMR or BBR (latter is better)
3. Spend the BBR in any denomination

In this method, you use the exact same ring signature technology without worrying about whether tokens are available in the denomination you want to spend. You also don't have to worry about not getting your change back.

It's a step backwards. At best it's interesting, but practically, it's worse.

The zero-knowledge aspect is not implemented and will take a trusted setup. The "trustless" aspect you refer to is the ring signature system that operates just like cryptonote.

You're an idiot and a terrible troll.

First you say "there's no reference to cryptonote on whitepaper." But there was, you just failed to READ it.

Then you say "SDC's implementation is a trusted setup b/c Zero-Knowledge requires trust" But rynomster already said it's using a trustless set-up AKA traceable ring-sig's that use ZK proofs... It says so in the WP, if you would, once again, READ it.

Now, you're basically saying, "Okay, okay, SDC actually does reference cryptonote in the WP... and SDC's anon does not require trust... but you're still no different than cryptonote!"

You are just throwing up straw-man after straw-man. And this most recent one was already addressed. SDC's implementation is not only unique, but superior to cryptonote, as already mentioned:

Quote from: rynomster on December 16, 2014, 04:01:15 PM

Quote from: ffmad on December 16, 2014, 03:40:23 PM

Quote from: FudandShort on December 16, 2014, 03:36:15 PM

Why there is no reference to Cryptonote on whitepaper?
Zero Knowledge + ring signatures is nothing more than Cryptonote.
Shadowcash is just cloning Monero without giving its credits and lying that is creating something new and revolutionary.
And everyone here know it.

From cryptonote white paper:

https://cryptonote.org/whitepaper.pdf

You can't read the reference at the end of the WP ?

Cryptonote uses a different curve, different libraries, and a whole different underlying core.
We used ring signatures to spend Shadow, which is created by sending SDC as an anonymous output.
Our scheme is quite a bit different, in that we borrow concepts from zerocoin, with the minting and spending, and use ring signatures to make the inputs untraceable from the outputs.. We're also using PoS instead of PoW.
Its a completely unique scheme and implementation

Quote from: battbot on December 16, 2014, 04:06:44 PM

Not to mention, Shadow's anonymity is much more lightweight and flexible than XMR / cryptonote solutions. And SDC is not restricted to any type of signatures... SDC can swap it out with any better zero knowledge systems should they ever come along, and SDC will always be able to improve on it.

Bugger off, troll.