BulletCT: Towards More Scalable Ring Confidential Transactions With...
summary
Provides a concrete critique of Any-out-of-N DLOG proofs (the ZGSX23 construction), showing they force N tags (not K) so transaction sizes balloon, and that accumulator-based tagging trades storage for extra cryptographic complexity and potential security gaps. Proposes a new DLOG RingCT signature combining a refined K-weight K-out-of-N proof with an efficient tag proof that enforces linkability to prevent double spends, implements the scheme, and benchmarks it against a patched ZGSX23 variant to demonstrate lower communication and verifier costs and improved scalability.
AI-written summary · about
related talks
28mRings and trees: how to prove coin ownership
31mSecure Distributed Storage
09mLIVE w/ Sri Aravinda Krishnan at MoneroKon 2019! EPI #67
47mSignatures 2
01h 23mProgram Presentations
33mZKVM: Fast, Confidential Smart Contracts
15mLIVE w/ Reuben Yap & Aran Jivanyan of Zcoin on implementing Lelantus in
52mFaster, Smaller, Weaker, Darker