19/11/19 follow up

19/11/19 follow up

Breaking Mimblewimble's Privacy Model

TL;DR: Mimblewimble's privacy is fundamentally flawed. Using only $60/week of AWS spend, I was able to uncover the exact addresses of senders and recipients for 96% Grin transactions in real time. The problem is inherent to Mimblewimble, and I don't believe there's a way to fix it.

Breaking Mimblewimble's Privacy Model

https://medium.com/dragonfly-research/breaking-mimblewimble-privacy-model-84bcd67bfe52

Breaking Mimblewimble's Privacy Model

Coinjoin전 Sniffer node를 이용해 트랜잭션추적이 가능하다.

이에대한 반박

Factual inaccuracies of "Breaking Mimblewimble's Privacy Model"

TL;DR: Mimblewimble privacy is not "fundamentally flawed". The described "attack" on Mimblewimble/Grin is a misunderstanding of a known limitation. While the article provides some interesting numbers on network analysis, the results presented do not actually constitute an attack, nor do they back up the sensationalized claims made.

Factual inaccuracies of "Breaking Mimblewimble's Privacy Model"

https://medium.com/grin-mimblewimble/factual-inaccuracies-of-breaking-mimblewimbles-privacy-model-8063371839b9

Factual inaccuracies of "Breaking Mimblewimble's Privacy Model"

이미 잘 알려진 문제이다.

밈블윔블은 Address가 존재하지 않아 문제가 되지 않는다.

Grin open research problem

mimblewimble/docs

Introduced in 2001 by Boneh, Lynn and Shacham, BLS signatures introduces non-interactive kernel aggregation and potentially simpler multisignature schemes. While it is not for certain that such signatures are well suited for Grin it is still interesting to explore this design. D. Boneh, B. Lynn, and H. Shacham.

mimblewimble/docs

https://github.com/mimblewimble/docs/wiki/Grin-Open-Research-Problems

mimblewimble/docs