Untraceable Oo-line Cash in Wallets with Observers

By Stefan BrandsCWI. 1993

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Privacy-Preserving Ridge Regression on Hundreds of Millions of Records (2013, methodology): “The commitment scheme we use is based on Pedersen commitments [18] and we use standard zero-knowledge protocols to prove modular arithmetic relations between the committed values [19], [20] as well as conjunctions of such arithmetic relations [21].”
Compact E-Cash (2005, background): “Electronic cash was invented by Chaum [27, 28], and extensively studied since [31, 40, 32, 11, 24, 12, 54, 39, 55, 5].”
Proof systems for general statements about discrete logarithms (1997, background): “see [1, 2, 4]) and voting schemes [11], are based on the difficulty of the discrete logarithm problem.”
Security Arguments for Digital Signatures and Blind Signatures (2015, background): “In 1993 Ferguson [20] and Brands [7] proposed new schemes without “cut-and-choose.”
Anonymous credentials light (2013, methodology): “For example Brands’ [8] and Abe’s [1] schemes are based on a Σ-protocol, while CL anonymous credentials [13] uses ZK proofs which are based on Σ-protocols.”