I heard many people talking about this coin in this forum. What is the difference between this coin and other anon coins?
I am just a layman and don't understand all the technical jargons. If anyone can explain to me, I can decide for myself whether this coin is worth buying.
Hi Shanem,
I have done a draft writeup for this
Most cryptocurrencies including Bitcoin rely on public ledgers where all transactions are public and the history of a coin can be traced from its inception. Some have tried to make it harder to do this by using coin mixers/tumblers but they involve trusting the mixer/tumbler in that they won't steal your money and that they aren't secretly recording how the coins are being mixed. Zerocoin technology allows the anonymization of coins that doesn't require you to put your trust in a mixer.
The easiest way to visualize Zerocoin tech is a huge jar where everyone who wants to anonymize their coins places their coins in the jar without revealing who they are and then at will, when they show the requisite proof that they did put coins in the jar, they are entitled to redeem any other person's coin in the jar that is of the same value thus the link between the coin that was put in the jar and the new coin she has taken out of the jar is broken. This is alike to having everyone put a quarter in the jar and have it sit there and when they want to spend their coin, they can then dip into the jar and pull out a quarter.
There are other anonymity solutions such as Monero's ring signatures or Dash's private send or Zcash's zerocash implementation. Each has their respective pros and cons.
With Zerocoin, some of its perceived advantages are:
a) Ability to choose whether to do a public or private transaction (which you can't do with Zcash or Monero) (some may see this as a weakness and prefer anonymity by default)
b) Very much less computationally intensive than Zcash to generate transactions so regular computers can still use Zcoin.
c) No need to place any trust in mixers or wait for it to be mixed (such as in Dash)
d) Possibly greater anonymity than Monero since Monero requires it to be 'mixed' with similar denominations transactions in the past so if your denomination is rather unique, it may stand out. However as time passes, this becomes less of a problem.
e) Based on very well reviewed cryptography compared to Zcash which is based on cutting edge tech. With Zcash, the sender, recipient and value are not revealed at all. From an anonymity standpoint this is great however if a bug is discovered and a hacker can secretly mint coins, this is very hard to detect! Total supply of Zcash cannot be determined.
f) Arguably less controversial 'parameter' generation than Zcash. Zcash relies on the initial secret being destroyed and they have figured out a way in which unless all participants collude to not destroy the secret, then the secret is destroyed. Zerocoin uses parameters generated from an a academic challenge (
https://github.com/zcoinofficial/zcoin/wiki/Parameters-in-set-up-phase-for-Zerocoin-in-ZCoin)
There are also drawbacks to Zerocoin's implementation of course which is why all these solutions have a role:
a) Locked to fixed denominations 1, 25, 50, 100 for Zerocoin. Meaning you can only put fixed denominations in the jar.
b) When you choose to put a coin in the jar and immediately redeem a new coin, there might be some analysis that can guess that the person putting in and taking out is the same person.
c) Still computationally intensive compared to Monero
What i need to find out is also how does Zerocoin scale compared to Zcash/Monero and that would be an important question to answer.