← Back to context

Comment by kqp

10 hours ago

Copy known good serial number + signature.

combine with a central authority server network and make it blind signatures and you have untraceable e-cash.

  • Blind signatures don’t work like that. Once you unblind them, they are very traceable. Chaumian e-cash can only be spent once for that reason.

    • when you unblind a blind signature all the signer knows is that it's a signature they signed at some point, they know nothing (true zero knowledge) about when or where they signed it among all the other signatures.

      1 reply →

  • No government wants untraceable e-cash. They want it fully traceable.

    • it would depend on the government and the situation. I suspect most don't realize this is possible. a small government can generate immediate demand for their currency doing this.

      1 reply →