分布式账本隐私:环签名、莫比乌斯和CryptoNote
Distributed Ledger Privacy: Ring Signatures, Möbius and CryptoNote
摘要:
分布式账本和区块链系统有望使金融系统更容易审计,降低交易对手风险,并无缝转移资产。密钥概念是由用于支出的加密私钥控制并由用于接收和审计目的的公钥表示的令牌。所有权转让由数字签名授权,并记录在众多参与者可见的分类账上。已经提出了几种增强这种分类账的隐私性的方法。在本文中,我们研究了两种主要的技术,以提高令牌传输的隐私与改进的密码学的帮助下:莫比乌斯和CryptoNote。这个比较很有启发性:这两种技术都使用“环签名”和某种形式的“隐形寻址”或密钥导出技术,但每种技术都以完全不同的方式实现。莫比乌斯是较新的,以更合作的方式(经许可)运作,尚未在足够详细的水平上指定。我们的主要目标是探索这两种技术在提高加密账本支付隐私方面的适用性。我们解释了在试图隐藏参与者的身份和交易的确切细节时出现的各种相互冲突的要求和战略选择,同时使代币的快速最终结算具有合理的流动性水平。我们表明,在这些系统中,第三方观察员看到模糊的结算。最后,我们总结了对此类系统实施者的明确警告和建议。
英文摘要:
Distributed ledger and blockchain systems are expected to make financial systems easier to audit, reduce counter-party risk and transfer assets seamlessly. The key concept is a token controlled by a cryptographic private key for spending, and represented by a public key for receiving and audit purposes. Ownership transfers are authorized with digital signatures and recorded on a ledger visible to numerous participants. Several ways to enhance the privacy of such ledgers have been proposed. In this paper we study two major techniques to enhance privacy of token transfers with the help of improved cryptography: Möbius and CryptoNote. The comparison is illuminating: both techniques use "ring signatures" and some form of "stealth addressing" or key derivation techniques, yet each does it in a completely different way. Möbius is more recent and operates in a more co-operative way (with permission) and is not yet specified at a sufficiently detailed level. Our primary goal is to explore the suitability of these two techniques for improving the privacy of payments on cryptographic ledgers. We explain various conflicting requirements and strategic choices which arise when trying to conceal the identity of participants and the exact details of transactions in our context while simultaneously enabling fast final settlement of tokens with a reasonable level of liquidity. We show that in these systems, third-party observers see obfuscated settlement. We finish with a summary of explicit warnings and advice for implementors of such systems.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。