|
MoneroResearch.info |
 |
 |
 |
|
Liang, M., Karantaidou, I., Baldimtsi, F., Gordon, D. S., & Varia, M. (2022). (∈, δ)-Indistinguishable Mixing for Cryptocurrencies, Proceedings on Privacy Enhancing Technologies, 2022(1), 49–74. Added by: Rucknium (05/05/2022, 22:14) Last edited by: Rucknium (05/05/2022, 22:24) |
 |
| Resource type: Journal Article DOI: doi:10.2478/popets-2022-0004 BibTeX citation key: Liang2022 View all bibliographic details  |
Categories: Not Monero-focused Creators: Baldimtsi, Gordon, Karantaidou, Liang, Varia Collection: Proceedings on Privacy Enhancing Technologies |
Views: 88/4098
|
Attachments
10.2478_popets-2022-0004.pdf  [48/1451]
|
URLs https://doi.org/10.2478/popets-2022-0004 |
| Abstract |
|
We propose a new theoretical approach forbuilding anonymous mixing mechanisms for cryptocur-rencies. Rather than requiring a fully uniform permuta-tion during mixing, we relax the requirement, insistingonly that neighboring permutations are similarly likely.This is defined formally by borrowing from the defini-tion of differential privacy. This relaxed privacy defini-tion allows us to greatly reduce the amount of interac-tion and computation in the mixing protocol. Our con-struction achievesO(n·polylog(n))computation time formixingnaddresses, whereas all other mixing schemesrequireO(n2)total computation across all parties. Ad-ditionally, we support a smooth tolerance of fail-stopadversaries and do not require any trusted setup. We an-alyze the security of our generic protocol under the UCframework, and under a stand-alone, game-based defi-nition. We finally describe an instantiation using ringsignatures and confidential transactions.
|
| Quotes |
|
In Appendix B, we discuss an instantiation of our generic mixing construction built upon any anony- mous transaction functionality, such as Monero’s ring signatures and confidential transactions. For our instan- tiation, we modify the ring signature content in order to support loop-payments, i.e. the ability for an input address to transfer amounts back to itself. Then, we de- scribe the ring’s structure as predefined by the parent buckets in the previous level and the output address for both real and noisy transactions, and we claim full in- distinguishability between them. We present a variant of our construction in Section 7 that is compatible with current signature and fee requirements of Monero. Added by: Rucknium |