[13141] in cryptography@c2.net mail archive
[Lucrative-L] double spends, identity agnosticism, and Lucrative
daemon@ATHENA.MIT.EDU (R. A. Hettinga)
Tue Apr 29 21:04:46 2003
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Tue, 29 Apr 2003 18:02:01 -0400
To: Digital Bearer Settlement List <dbs@philodox.com>
From: "R. A. Hettinga" <rah@shipwright.com>
Cc: cryptography@metzdowd.com, cypherpunks@lne.com
--- begin forwarded text
From: "Patrick" <patrick@lfcgate.com>
To: <lucrative-l@lucrative.thirdhost.com>
Subject: [Lucrative-L] double spends, identity agnosticism, and Lucrative
Date: Tue, 29 Apr 2003 14:46:48 -0600
Importance: Normal
Sender: owner-lucrative-l@lucrative.thirdhost.com
A quick experiment has confirmed the obvious: when a client
reissues a coin at the mint, both the blinded and its unblinded cousin
are valid instruments to the Lucrative mint.
Example: Alice uses the Mint's API to reissue a one-dollar note,
blinding the coin before getting a signature, and unblinding the
signature afterwards. She's left with both a blinded and a non-blinded
version of the coin. The mint believes they are both valid. Instant,
unlimited inflation.
I believe the solution to this is to have the mint track both
spent coins and issued coins (that is, it automatically cancels coins it
issues, before the client receives them). The client is left with no
choice but to go through a blinding and unblinding process in order to
have a usable coin.
This seems to make identity-agnostic cash difficult or
impossible, at least with Lucrative:
http://www.io.com/~cman/agnostic.html,
http://cypherpunks.venona.com/date/1995/09/msg00197.html .
Patrick
The Lucrative Project: http://lucrative.thirdhost.com
......................................................
To subscribe or unsubscribe from this discussion list,
write to lucrative-l-request@lucrative.thirdhost.com
with just the word "unsubscribe" in the message body
(or, of course, "subscribe")
--- end forwarded text
--
-----------------
R. A. Hettinga <mailto: rah@ibuc.com>
The Internet Bearer Underwriting Corporation <http://www.ibuc.com/>
44 Farquhar Street, Boston, MA 02131 USA
"... however it may deserve respect for its usefulness and antiquity,
[predicting the end of the world] has not been found agreeable to
experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
