Avatar
mrman
d8f7d9f02fbf867b39fc15133bb985f953a77747a512150ef9c14c227cef8424

Does strike fraud department usually call you?

This is a fake email yeah?

out the closet? finally

I also can't spell check. Thought the circle P worked with pleb

The bch crowd is taking advantage of all the Bitcoiners living here now

u trying to @ me bro

Replying to Avatar Ademan

#asknostr

Hey nostr:nprofile1qqsxwkuyle67y94tj378gw8w2xw2wa6nwmwlqhddlwnz0z7sztsaw2qpz9mhxue69uhkummnw3ezuamfdejj7qg4waehxw309aex2mrp0yhxgctdw4eju6t09uq3jamnwvaz7tmjv4kxz7fwwdhx7un59eek7cmfv9kz7ex47xm I figure you're the guy to ask here. If I'm building a coinjoin but want to *consolidate* two outputs from separate participants which are going to the same recipient, how can all participants validate that their coins are accounted for in the outputs *without* sharing their destinations and amounts with all other participants? I assume this is possible, but I'm struggling to construct it.

ex

A sending 1BTC to D

B sending 1BTC to E

C sending 2BTC to D

Ideally, the outputs would be

3BTC to D

1BTC to E

But how can participants differentiate that from

2BTC to D

1BTC to E

1BTC to F

(without knowing the destinations of each participant's coins, ruining all unlinkability)

I've had a few ideas, but I've run into a brick wall every time. Blinded addition seems not to be useful, since you need to first prove you have contributed enough in inputs which seems to necessitate linking your blinded value to the inputs, ahead of time, negating the value of blinded addition?

I hope I'm missing something obvious (or even a paper doing exactly this?)

dang I need to log in over here more often