|
MoneroResearch.info |
 |
 |
 |
|
Ronge, V., Egger, C., Lai, R. W. F., Schröder, D., & Yin, H. H. F. (2021). Foundations of Ring Sampling, Proceedings on Privacy Enhancing Technologies, 2021(3), 265–288. Added by: Rucknium (23/02/2022, 16:12) |
 |
| Resource type: Journal Article DOI: doi:10.2478/popets-2021-0047 BibTeX citation key: Ronge2021 View all bibliographic details  |
Categories: Monero-focused Creators: Egger, Lai, Ronge, Schröder, Yin Collection: Proceedings on Privacy Enhancing Technologies |
Views: 83/2822
|
Attachments
10.2478_popets-2021-0047.pdf  [32/1396]
|
URLs https://doi.org/10.2478/popets-2021-0047 |
| Abstract |
|
A ring signature scheme allows the signer to sign on behalf of an ad hoc set of users, called a ring. The verifier can be convinced that a ring member signs, but cannot point to the exact signer. Ring signatures have become increasingly important today with their deployment in anonymous cryptocurrencies. Conventionally, it is implicitly assumed that all ring members are equally likely to be the signer. This assumption is generally false in reality, leading to various practical and devastating deanonymizing attacks in Monero, one of the largest anonymous cryptocurrencies. These attacks highlight the unsatisfactory situation that how a ring should be chosen is poorly understood. We propose an analytical model of ring samplers towards a deeper understanding of them through systematic studies. Our model helps to describe how anonymous a ring sampler is with respect to a given signer distribution as an information-theoretic measure. We show that this measure is robust – it only varies slightly when the signer distribution varies slightly. We then analyze three natural samplers – uniform, mimicking, and partitioning – under our model with respect to a family of signer distributions modeled after empirical Bitcoin data. We hope that our work paves the way towards researching ring samplers from a theoretical point of view. Added by: Rucknium Last edited by: Rucknium |