Re: [cryptography] Regarding Zerocoin and alternative cryptographic accumulators

2013-05-15 Thread Jane
Hi Adam, Matthew! Thanks for the reply. So, basically, the main obstacle to practical implementation would be constructing efficient ZKPs with the Lipmaa accumulator, while from a theoretic standpoint there is also the issue that the scheme being used is somewhat exotic and needs more academic

Re: [cryptography] Regarding Zerocoin and alternative cryptographic accumulators

2013-05-05 Thread Adam Back
This below post didnt elicit any response, but the poster references an interesting though novel (and therefore possibly risky) alternative accumulator without the need for a centrally trusted RSA key generator (which is an anathema to a distributed trust system), or alternatively zero-trust but

Re: [cryptography] Regarding Zerocoin and alternative cryptographic accumulators

2013-05-05 Thread Adam Back
[More address typos, its contagious!, so resending] This below post didnt elicit any response, but the poster references an interesting though novel (and therefore possibly risky) alternative accumulator without the need for a centrally trusted RSA key generator (which is an anathema to a

Re: [cryptography] Regarding Zerocoin and alternative cryptographic accumulators

2013-05-05 Thread Matthew Green
Hi Adam, Jane, I'm not as familiar with Lipmaa's construction as I am with the RSA-based and bilinear accumulators. However, I note that Lipmaa's proposals rely on strong (or at least, new) hardness assumptions in class groups of imaginary quadratic order. Lipmaa points out the need for

[cryptography] Regarding Zerocoin and alternative cryptographic accumulators

2013-04-27 Thread Jane
Good afternoon mailing list subscribers! Good afternoon Mr. Green! First, I'd like to ask pardon if my question is not particularly bright - I am not a professional cryptographer, so I might be missing something very obvious. I have recently read the Zerocoin paper which describes a very