6

I hope so. I'm going to look pretty stupid if it isn't actually anonymous. The paper contains a sketch of a proof that the system is in fact anonymous. That is verifiable. Indeed to get published, other academics had to look at it. Now that the paper is public, even more will. If there is a problem with the proof, someone will point it out. As others have ...


6

This is the zerocoin paper, but as far as I can tell, they haven't released source code yet, so all we can really do is speculate. The single largest problem it has is that a zerocoin spend requires about 100x more disk space/bandwidth/cpu than a normal bitcoin transaction. However, the intended use case is that you use normal bitcoin transactions most of ...


3

Zerocoin is a proposed extension on Bitcoin to make Bitcoin more private. Zerocoin only hides the origin of a payment, the destination and amounts are still public. Zerocash is a further extension of the zerocoin protocol which hides the destination and amounts. Zerocash transactions are more compact than zerocoin transactions. Zcash is an implementation ...


2

One of the problems (or advantages) of Bitcoin is that funds can be traced. Even if each address is used only once, it is possible to link individual transactions to each other similarly to how it is possible to track bank notes by their serial numbers (with the addition that everyone records serial numbers of all the notes they handle). Zerocoin solves ...


2

I found out that it's explained quite exactly here https://github.com/Zerocoin/libzerocoin/wiki/Integrating-with-bitcoin-clients


1

The process is basically as follows. 1. You generate a random serial number S and a secret r. S will be used to denote a zerocoin. Then you create a commitment C = f(S,r) s.t. without knowing both S and r it is very hard to get those back from C. Then you disclose C into the public channel. 2.To redeem the coin S you disclose S and give a proof that S ...


Only top voted, non community-wiki answers of a minimum length are eligible