|
MoneroResearch.info |
 |
 |
 |
|
Chator, A., & Green, M. 2018, How to squeeze a crowd: reducing bandwidth in mixing cryptocurrencies. Paper presented at 2018 IEEE European Symposium on Security and Privacy Workshops. Added by: Jack (08/01/2023, 14:42) Last edited by: Jack (20/01/2023, 18:05) |
 |
| Resource type: Proceedings Article BibTeX citation key: Chator2018 View all bibliographic details  |
Categories: Monero-focused Creators: Chator, Green Collection: 2018 IEEE European Symposium on Security and Privacy Workshops |
Views: 118/2235
|
Attachments
mixing.pdf  [16/762]
|
URLs https://isi.jhu.edu/~mgreen/mixing.pdf |
| Abstract |
|
Several popular cryptocurrencies incorporate privacy features that “mix” real transactions with cover traffic in order to obfuscate the public transaction graph. The underlying protocols, which include CryptoNote and Monero’s RingCT, work by first identifying a real transac- tion output (TXO), sampling a number of cover outputs, and transmitting the entire resulting set to verifiers, along with a zero knowledge (or WI) proof that hides the identity of the real transaction. Unfortunately, many of these schemes suffer from a practical limitation: the description of the combined input set grows linearly with size of the anonymity set. In this work we propose a simple technique for efficiently sampling cover traffic from a finite (and public) set of known values, while deriving a compact description of the resulting transaction set. This technique, which is based on programmable hash functions, allows us to dramatically reduce transaction bandwidth when large cover sets are used. We refer to our construction as a recoverable sampling scheme, and note that it may be of independent interest for other privacy applications. We present formal security definitions; prove our constructions secure; and show how these constructions can be integrated with various currencies and different cover sampling distributions.
Added by: Jack Last edited by: Jack |
| Notes |
|
"In this work we described a new approach to describ- ing transaction sets in deployed mixing cryptocurrencies such as Monero and ByteCoin. We believe that our tech- nique is promising and can offer substantial bandwidth improvements when the total size of the transaction set is large." Added by: Jack Last edited by: Jack |