Pieter Wuille [ARCHIVE] on Nostr: 📅 Original date posted:2011-12-16 🗒️ Summary of this message: Temporary ...
📅 Original date posted:2011-12-16
🗒️ Summary of this message: Temporary addresses for anonymity require interaction with the wallet-hosting entity. EC crypto tricks can generate fresh private keys for each transaction.
📝 Original message:On Thu, Dec 15, 2011 at 04:26:38PM +0800, Walter Stanish wrote:
> Interaction is a requirement, since there seems to be a widely felt
> need to preserve anonymity through the use of temporary addresses.
> Generating a temporary address requires some actual processing to
> achieve, since the issuing of the new address cannot be done without
> interacting with the entity hosting the wallet (unless I'm missing
> something?).
Just replying to this one comment: yes, some interaction is always
necessary, but not necessarily directly with the entity hosting the wallet.
There are some EC crypto tricks to do this (often mentioned under
"deterministic wallets" before):
The wallet-hosting entity has a private key x, with public key X.
The address-generating entity knows X, and generates a fresh private
key y for each transaction. For each, it calculates Z=y*X, and asks
the client to pay to hash160(Z). Afterwards, it can send a bunch of
y's to the wallet hosting service, which can reconstruct z=y*x for
each. Alternatively, the y's can be generated according to a predefined
scheme instead.
--
Pieter
Published at
2023-06-07 02:47:35Event JSON
{
"id": "7e19f33f6b87ed380a129ee9dbf131fb0294a9f63753758a6c4cf6582a354abf",
"pubkey": "5cb21bf5d7f25a9d46879713cbd32433bbc10e40ef813a3c28fe7355f49854d6",
"created_at": 1686106055,
"kind": 1,
"tags": [
[
"e",
"f45e7ca88e6eb3dd1e645e8e3cbb476c5b24e8003cb71eebe205594bb2a4d152",
"",
"root"
],
[
"e",
"c9ef86a4e302c270b99476cb3c1819d0d04311ab6a1ac33f12c65ac72cb9d20b",
"",
"reply"
],
[
"p",
"77979142f3407f28a5a71956e33342e486ee981e614e0d2ea36ddaf27b8a5a67"
]
],
"content": "📅 Original date posted:2011-12-16\n🗒️ Summary of this message: Temporary addresses for anonymity require interaction with the wallet-hosting entity. EC crypto tricks can generate fresh private keys for each transaction.\n📝 Original message:On Thu, Dec 15, 2011 at 04:26:38PM +0800, Walter Stanish wrote:\n\u003e Interaction is a requirement, since there seems to be a widely felt\n\u003e need to preserve anonymity through the use of temporary addresses.\n\u003e Generating a temporary address requires some actual processing to\n\u003e achieve, since the issuing of the new address cannot be done without\n\u003e interacting with the entity hosting the wallet (unless I'm missing\n\u003e something?).\n\nJust replying to this one comment: yes, some interaction is always\nnecessary, but not necessarily directly with the entity hosting the wallet.\nThere are some EC crypto tricks to do this (often mentioned under\n\"deterministic wallets\" before):\n\nThe wallet-hosting entity has a private key x, with public key X.\nThe address-generating entity knows X, and generates a fresh private\nkey y for each transaction. For each, it calculates Z=y*X, and asks\nthe client to pay to hash160(Z). Afterwards, it can send a bunch of\ny's to the wallet hosting service, which can reconstruct z=y*x for\neach. Alternatively, the y's can be generated according to a predefined\nscheme instead.\n\n-- \nPieter",
"sig": "21c79faf1746346c1feff5731b922bcf275cbff4eb47bfa2c654a21baacddbd146fc301b151f93861752e955d43fcfb1d8a2f4da1b81338475543e28a76a3064"
}