Pim Keer @ bitcoin++

Chaumian ecash enables a centralised mint to issue tokens that its users can transact with. These transactions are private, in the sense that the mint cannot link a token that it receives from a payee with a token it issued to a payer. However, existing ecash constructions all assume the mint to be trusted. In particular, the mint is assumed not to secretly overissue tokens (a so-called slow rug). In this talk, I'd like to present an ecash protocol that protects users from overissuance, while preserving unlinkability, through the use of Schnorr Proofs-of-Knowledge. Every token will be accompanied by such a proof to guarantee the corresponding blinded message is present in a public list of issued tokens.

30m agenda ▶ watch