I want to understand this in a little more layman's.

In the video, you give an example, "I want to prove that I own a utxo, one of 10,000 utxos, without revealing which utxo"

With this, are you also expected to ensure that the value of the utxo is larger than a given target (eg. 100,000 sats)? Do all 10,000 utxos have to be larger than the target to facilitate this proof?

Reply to this note

Please Login to reply.

Discussion

Yep, the idea is to have some kind of filter that people agree on.

For example: I own one of all the utxos that were created between block 750000 and 800000, and whose size is at least 0.1 btc. That number is probably not too large, and doing it this way you can get big anonymity sets without too much inconvenience to anyone.

It is pretty tricky practically, but it is clearly possible.

Is it possible for multiple people to create a ring signature with the same set of utxos except each one is signing for a different utxo?

Does this meaningfully reduce the privacy at all?

That behaviour in itself is expected, and doesn't reduce the privacy (well, not in any obvious way). You could weirdly argue it's *better* - because, the idea of me signing 1 of 10 (e.g.) would be "that could be any one of those 10 utxo owners", which is even more true if *all* of the utxo owners make such a signature ... it's a debatable point, but you want in an ideal world, that the behaviour of all the utxo owners is similar. For example, they all spend the utxo after the same amount of time (this is of course ridiculous, so the best you can do is "the rules of usage don't preclude spending at any time, therefore spending at any time doesn't leak information about the owner").

I'm sorry that my description didn't cover much detail, I explained the thinking behind *why* you'd want to make these kind of signatures in my blog post "RIDDLE".

Fyi, https://waxwingdonation.com/ is down, I think the SSL certificate has expired maybe?

It is preventing zaps afaik.

Thanks, I'll check it out