To broadcast transactions in public, even if those transactions are obscured, is to risk trouble like identity theft or corporate espionage. Thus, both individual and institutional adoption of peer-to-peer digital cash require strong privacy properties, e.g. properties obtained from zero-knowledge protocols without trusted setups such as linkable ring signatures. Transactions in the digital currency Monero are (linkably) anonymously authenticated using linkable ring signatures; we describe an alternative linkable ring signature scheme, Triptych, which was recently proposed at Monero Research Lab, for use in a Monero-style protocol. We compare Triptych to the current Monero protocol as well as the recent proposals RingCT 3.0 and Omniring. This work was generously supported by donations from the Monero community.

Bio: Brandon has been contributing the Monero protocol since 2014, received his Ph.D. in Mathematical Sciences from Clemson University in 2017.