From: iang@cs.berkeley.edu (Ian Goldberg)
Date: Wed, 29 May 1996 10:18:32 +0800
To: cypherpunks@toad.com
Subject: Re: Is Chaum's System Traceable or Untraceable?
In-Reply-To: <01I53GAYSQUC8Y4Z90@mbcl.rutgers.edu>
Message-ID: <4ofocm$hd1@abraham.cs.berkeley.edu>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

In article <Pine.LNX.3.93.960524230954.96A-100000@smoke.suba.com>,
snow  <snow@smoke.suba.com> wrote:
>On Fri, 24 May 1996, E. ALLEN SMITH wrote:
>
>> From:      IN%"iang@cs.berkeley.edu" 23-MAY-1996 13:56:31.71
>> 
>> >Ah.  I see I was misunderstood.  The goal was not to make the shop anonymous,
>> >but rather to be able to provide change to an anonymous payer.
>> 
>>       I had thought that the basic purpose of the fully anon system was just
>> that - full anonymnity for payer and payee. Under your suggestion, the shop
>> gives up this anonymnity under these circumstances in order to be able to make
>> change. I'm not sure if I would call that a very good tradeoff...
>
>      Howzabout this: Figure out about how many coins of each denom. the
>shop should have on hand, and every so often the shop goes online to even
>out it's til. That way the shop maintains the capability to make change
>for anything. 
>      Alternative: Instead of the shop going online every <x> minutes,
>set it up so that everytime the shop goes online it evens out the til so
>that it really isn't know whether the shop went online to make change for
>a specific customer, or just to even out the til.
>
>
But then the shop, having seen the coins before, can collude with the bank
to identify the customer!  The point of this use of the "anon" protocol
is that the shop, throughout the transaction, never sees the coin it
uses to provide change to the customer.

   - Ian

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMatkxUZRiTErSPb1AQEoJQQAqNnLZZybaB45yci7wiHI7fXX/tjEKc2n
riAJ0TV/Ensuzan7KxYYQSyxvtBnZS5LxDM/pq25zh66WHgzVs4ocJPIuBLl/8Qz
ITeIEKTuZ+ZwoyR0oPfO/73wPO4j7fNmShQ0sC/Hx4s2C4zX3I+9buegiSX24ded
883j6nY357o=
=drwL
-----END PGP SIGNATURE-----