This is now explained in the current Beta Guide:
Zcash has two kinds of address: a z-addr is a fully private address
that uses the zero-knowledge proving system to shield a transaction
and balance privacy. A t-addr (aka "transparent address") is similar
to a Bitcoin address.
An address can be created using:
zcash-cli getnewaddress # t-addr, or
In addition to what is said above, the creators of zcash wanted an anonymous payment system. Bitcoin addresses are visible publicly in the blockchain. Zcash wanted to give the users the option of hiding the address to provide anonymity, hence the z-addr. The t-addr is a public address that can be viewed publicly. If the user chooses to be anonymous, they can ...
My understanding is that the verifier is anyone that maintains the blockchain.
All nodes that fully-validate transactions will be acting as zk-SNARK verifiers.
In particular, is the transaction graph still public?
The transaction graph for shielded transactions is as private as it is feasible to be.
When a note is created, a commitment cm to the ...
tl;dr You should use rounded values of ZEC when unshielding, and even then you will have less privacy than if you only use z-addrs.
We address this exact question in this blog post (images from which I reproduce below).
Transactions using the Bitcoin-inherited t-addresses are obviously traceable. However, the zero-knowledge property associated with the use ...
To simply generate a new main network address, you can use the official zcash-cli like that:
$ zcash-cli getnewaddress
$ zcash-cli z_getnewaddress
Vanity is a bit tricky, but there is an offline wallet generator ...
Zcash the currency requires the generation of parameters that must then be securely destroyed. If this data is not securely destroyed by Zcash the company they could undermine the currency, by being able to create new money. For a more thorough discussion, see also the Zcash blog post on the problem and one by Greg Slepak discussing the potential risks.
Monero - A cryptocurrency that uses ring signatures, a type of cryptography that enables untraceable transactions. It is extremely unlikely that a transaction can be traced to a particular user. Monero is based on the CryptoNote protocol and possesses significant algorithmic differences relating to blockchain obfuscation
DASH - rebranded from "Darkcoin" to ...
As Nate Eldredge pointed out, the chart you're looking at is denominated in BTC, while the market cap is denominated in USD.
If you look at the chart below, you'll see that the price in USD (green) behaves exactly as you describe in your question.
On the other hand, the price in BTC (orange) does not behave like you expected, because it combines the ...
The developers of Zcash did try to implement their solution using the Bitcoin blockchain but it required several changes to Bitcoin core that where both difficult and more importantly difficult to come to consensus for the changes with the rest of the Bitcoin community. So the Zcash developers decided to make a new blockchain.
So technically speaking it ...
The derivation is given in the Zclassic codebase:
from pyblake2 import blake2s
'Zclassic' + blake2s(b'No taxation without representation. BTC #437541 - 00000000000000000397f175a94dd3f530b957182eb2a9f7b79a44a94a5e0450').hexdigest()
The reason they generate it in this way is because Zcash generates its pszTimestamp like so:
from pyblake2 import blake2s
To add to @str4d's answer, here are links to public documentation and discussion of the payment disclosure feature:
Selective Disclosure & Shielded Viewing Keys - Zcash blog
Payment Disclosure (Experimental Feature)
An Introduction to Payment Disclosure in Zcash - Gareth Davies
Note that if Bob were concerned about this possibility, he could have given ...
tl;dr Alice can reveal payments she made to Bob. She cannot reveal payments that others made to Bob, or reveal what (if anything) Bob does with the ZEC that Alice sent.
Revealing the pre-image of the note commitment only proves that Alice knows the pre-image. It does not prove that Alice sent the transaction, because the proof is replayable: once revealed, ...
Zcash transparent addresses can be generated in the usual BIP 44 way. There is a Zcash coin_type defined in SLIP 44, which can be used with any standard Bitcoin library. The resulting transparent addresses just need to be re-encoded with the Zcash transparent address prefix for mainnet.
There is currently no library for generating Zcash shielded addresses ...
The most high level view is that it proves somewhere exists some set of UTXOs and the sum of their values is equal or larger than sum of this transaction outputs. The exact shielded value is encrypted inside the transaction and is never disclosed.
Everyone who runs a full node and has access to the trusted setup data (which you have to download in order to ...
Zcash is based on a base currency. As far as I know it is bitcoin, right?
Zcash is not based on a base currency; it is an independent block chain. The code was built on a fork of Bitcoin Core 0.11.2 (and since then has had numerous backports of subsequent upstream changes).
I guess the coins in the shielded pool are zcoin, right?
How about the ...
You are correct that the Sprout commitment tree root / anchor is not stored in the block header. It is calculated by each node when a block arrives, and is stored in the block index.
The Sapling commitment tree root is stored in the block header (in what was the hashReserved field); nodes check this against the block contents and reject blocks with an ...
Suppose Alice has an output with 1 unit of value we'll call AO1 (Alice output 1). And suppose Bob has an output with 2 units of value we'll call BO1 (Bob output 1).
Alice sends AO1 to Charlie, forming CI1 (Charlie input 1), with one unit of value. Bob sends BO1 to Charlie, forming CO2, with two units of value.
Charlie now pulls CI1 (an input of Charlie's ...
Zcash was built on a fork the Bitcoin Core 0.11.2 codebase, which generated (transparent) keys randomly. The Sprout shielded keys were similarly generated randomly. Thus, it is necessary to back up your wallet whenever you use transparent addresses (because Zcash inherited Bitcoin Core's behaviour of using a new transparent address for every change output), ...
The BIP32 specification allows a user to derive many keys from a master extended private key, and this master key is derived from a seed (often, a mnemonic phrase). This allows the user to just back up one piece of data (the seed phrase), knowing that they'll be able to use it to derive all subsequent keys in their wallet.
Prior to the implementation of BIP ...
Is there a reason why people immediately transfer their coins to a
If someone will hacking that mining pool, his able to steal all users coins. Move money to the cold-storage is a good practice. They're also can just move money to the exchange.
There is no difference between bitcoin and zcash here, mining with multiple machines work the same way.
If you have 2 machines they can mine in the same mining pool or separate pools. You choose.
Your machines are never competing against each other. You are the one that get paid for the work of both machines.
If you are solo mining instead of using a pool,...
Increasing fungibilty is a goal, there have been several proposals of differing seriousness and support. But this is generally seen as a goal for the project.
That being said, BTC/LTC simply cannot ever achieve this goal as throughly as Monero has without a complete redesign, which will not happen.
Someone proposed something similar, posting encrypted files on IPFS network (public like say the Ethereum blockchain) and then sending keys to the participants to decrypt.
The founder Juan Bennet highlighted the following quote:
'Naive example: encrypt the file with some secret, and share the secret with the people who have "read permission"'
There is no encryption involved anywhere in a blockchain. There are no keys to encrypt with, as every node has the same information as all others. Cryptography is involved, but for signing/proving. Not for encrypting.
Even in the zcash case, encryption is not involved. All wallets do is prove to the rest of the network that they had the funds they're ...