Review of Ashigaru Whirlpool: RSA Blinding & Deanonymization Concerns 🌀

- blog: https://bc1984.com/ashigaru-terminal-whirlpool-review

- gist: https://gist.github.com/84adam/e130b40cff5915de67b86fc8e452c8aa

Reply to this note

Please Login to reply.

Discussion

Very useful analysis of the vulnerabilities of the current #ashigaru whirlpool implementation. I encourage everyone interested in this topic to read it.

nostr:nevent1qqs9wdxjrka86mfuq3nkdy3uu4clnrdaysqfcfv7maah905uk4u55lcpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsygpfa00047elmev8hns66me65xl6uu3maxrucwgwjtwdz2cuaasxnqpsgqqqqqqslhwkv2

🤔

"For users currently considering Ashigaru Terminal, the risk assessment depends largely on their usage patterns and threat model. Users who perform occasional single-round mixing may find the current protections adequate, as they are protected against the most obvious coordinator-based attacks. However, users who engage in frequent mixing or who require long-term anonymity protection should be aware of the cross-round correlation risks."

nostr:nevent1qqs9wdxjrka86mfuq3nkdy3uu4clnrdaysqfcfv7maah905uk4u55lcppemhxue69uhkummn9ekx7mp0qgszn677ltanlhjc008p44hn4gdl4eerh6v8esusayku6y43emmqdxqrqsqqqqqpft73ew

Why exactly do you think it's useless?