Stealth address with SX (anonymous payments) - page 6.

marcus_of_augustus

legendary

Activity: 3920

Merit: 2349

Eadem mutata resurgo

Quote from: bigb159 on January 16, 2014, 08:14:26 AM

This concept is awesome, but needs some PR reworking. Can we consider renaming this to something like "restricted," "confidential," "personal," "private" or "nonpublic" . "Stealth" has an off-the-books connotation that doesn't fit what govs. want to see in Crypto right now.

Maybe since it is in essence a Diffie-Hellman key exchange technique ... you could call it Forward Privacy Transaction or DH-TX or some such ... i.e. in same name as the original cryptographic technique it is based upon?

http://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange

Edit:

Quote

while the authentication part of ssl would have to be dealt with separately through some pgp stuff or x509 or whatever?

... you could use a stealth address secured in the namecoin blockchain for human-readable authentication, without a 3rd party.

waxwing

sr. member

Activity: 469

Merit: 253

Quote from: agorism on January 16, 2014, 10:30:10 AM

Can we implement deniable transactions, like OTR?

I think it's a core aspect of Bitcoin that the transaction record is public. So I can't see how OTR can ever work (even if you prune outputs, a record will still exist somewhere). But deniability is addressed via coinjoin, coinswap, mixing and stealth to an incredible extent, if they're all implemented and widely used.

Only Zerocoin (in general, zero knowledge proofs) can address what you hope for fully. Once you can prove possession of a secret without leaking any information, the entire blockchain can go dark.

minorman

legendary

Activity: 945

Merit: 1003

Great work, Amir! Cheesy

agorism

newbie

Activity: 45

Merit: 0

This is AMAZING!!!
Thank you so much for this contribution Cheesy

We have encrypted transactions now.
Can we implement deniable transactions, like OTR?

kcirazy

newbie

Activity: 53

Merit: 0

Quote from: bigb159 on January 16, 2014, 08:14:26 AM

This concept is awesome, but needs some PR reworking. Can we consider renaming this to something like "restricted," "confidential," "personal," "private" or "nonpublic" . "Stealth" has an off-the-books connotation that doesn't fit what govs. want to see in Crypto right now.

I think Jemery preferred "Reusable addresses", because this type of address can be re-used by multiple payers, without losing privacy.
- Mike, Wladimir, Odinn and Gregory agreed with this.

Other than that. Excelent work genjix! Great to see that SX is well supported.

prof7bit

hero member

Activity: 938

Merit: 500

https://youengine.io/

The github address linked in section 1.3 on sx.dyne.org: https://github.com/genjix/sx/ does not work for me (404)

Otherwise these sx tools seem to be a great project, exactly what I was looking for all the time, why didn't I see this earlier?

genjix

legendary

Activity: 1232

Merit: 1076

Quote from: oakpacific on January 16, 2014, 08:18:15 AM

I guess sx erases the payee's pubkey and encrypts the payer's privkey after the stealth payment right? If say FBI breaks into Alice's house and seizes her computer, they should not be able to figure out she has paid Bob isn't it?

Nothing is stored on your computer. There's no files involved in this. You are responsible for keeping the secret. I suggest storing it encrypted somewhere or writing it down on a piece of paper.

oakpacific

hero member

Activity: 784

Merit: 1000

I guess sx erases the payee's pubkey and encrypts the payer's privkey after the stealth payment right? If say FBI breaks into Alice's house and seizes her computer, they should not be able to figure out she has paid Bob isn't it?

bigb159

full member

Activity: 163

Merit: 100

This concept is awesome, but needs some PR reworking. Can we consider renaming this to something like "restricted," "confidential," "personal," "private" or "nonpublic" . "Stealth" has an off-the-books connotation that doesn't fit what govs. want to see in Crypto right now.

cr1776

legendary

Activity: 4214

Merit: 1313

Quote from: genjix on January 16, 2014, 07:50:25 AM

exactly

I've written more plans for this: https://wiki.unsystem.net/index.php/DarkWallet/Overview

This is very nice.

genjix

legendary

Activity: 1232

Merit: 1076

exactly

I've written more plans for this: https://wiki.unsystem.net/index.php/DarkWallet/Overview

waxwing

sr. member

Activity: 469

Merit: 253

Quote from: genjix on January 16, 2014, 07:37:12 AM

Quote from: waxwing on January 16, 2014, 07:35:42 AM

Nice work, Amir

You seem to have an expired ssl cert on *.unsystem.net, by the way.

This whole system is very reminiscent of ssl, since I'm on the subject.. Initial handshake with shared secret. But of course the purpose is different in various ways. If we think of a scenario where a customer wants to pay to a Silk Road merchant, I guess you'd say that this part (stealth addresses) is a kind of substitute for the encryption part of ssl (well, not a complete substitute but part) (because obviously you can't encrypt the blockchain but this serves to seriously obfuscate the meaning of txs), while the authentication part of ssl would have to be dealt with separately through some pgp stuff or x509 or whatever?

I've changed the link now in the OP.

Original link: https://wiki.unsystem.net/index.php/Sx/Stealth

Alternative link: https://en.bitcoin.it/wiki/Sx/Stealth

All these new innovations are great. Especially when you start thinking about systems like Twister and their implications. Writing functions like initiate_stealth() is probably the coolest thing I've ever written.

Imagine it; stealth + coinjoin - no one can trace the transactions. multisig - website can never steal funds. SR website code - open sourced with multiple servers for decentralization (maybe Twister too I don't even know anything about it yet).

Soon we'll reach a point where it doesn't even matter if the FBI run SR from their headquarters - it'll still be safe Cheesy

genjix

legendary

Activity: 1232

Merit: 1076

Quote from: waxwing on January 16, 2014, 07:35:42 AM

Nice work, Amir

You seem to have an expired ssl cert on *.unsystem.net, by the way.

This whole system is very reminiscent of ssl, since I'm on the subject.. Initial handshake with shared secret. But of course the purpose is different in various ways. If we think of a scenario where a customer wants to pay to a Silk Road merchant, I guess you'd say that this part (stealth addresses) is a kind of substitute for the encryption part of ssl (well, not a complete substitute but part) (because obviously you can't encrypt the blockchain but this serves to seriously obfuscate the meaning of txs), while the authentication part of ssl would have to be dealt with separately through some pgp stuff or x509 or whatever?

I've changed the link now in the OP.

Original link: https://wiki.unsystem.net/index.php/Sx/Stealth

Alternative link: https://en.bitcoin.it/wiki/Sx/Stealth

All these new innovations are great. Especially when you start thinking about systems like Twister and their implications. Writing functions like initiate_stealth() is probably the coolest thing I've ever written.

waxwing

sr. member

Activity: 469

Merit: 253

Nice work, Amir

You seem to have an expired ssl cert on *.unsystem.net, by the way.

This whole system is very reminiscent of ssl, since I'm on the subject.. Initial handshake with shared secret. But of course the purpose is different in various ways. If we think of a scenario where a customer wants to pay to a Silk Road merchant, I guess you'd say that this part (stealth addresses) is a kind of substitute for the encryption part of ssl (well, not a complete substitute but part) (because obviously you can't encrypt the blockchain but this serves to seriously obfuscate the meaning of txs), while the authentication part of ssl would have to be dealt with separately through some pgp stuff or x509 or whatever?

genjix

legendary

Activity: 1232

Merit: 1076

Quote from: oakpacific on January 16, 2014, 04:36:51 AM

The most important difference between this and the deterministic wallet is that you may never need to publicize your address(defense against Google data mining) to receive payments, which has to be spelled out somewhere I think.

It's fantastic. This combined with CoinJoin = unstoppable anonymous Bitcoin.

oakpacific

hero member

Activity: 784

Merit: 1000

The most important difference between this and the deterministic wallet is that you may never need to publicize your address(defense against Google data mining) to receive payments, which has to be spelled out somewhere I think.

genjix

legendary

Activity: 1232

Merit: 1076

SX may release - stealth tools, EC commands, HD keys

See the tutorials on HD keys and stealth payments.

Code:

$ sx stealth-newkey
Stealth address: vJmwY32eS5VDC2C4GaZyXt7i4iCjzSMZ1XSd6KbkA7QbGE492akT2eZZMjCwWDqKRSYhnSA8Bgp78KeAYFVCi8ke5mELdoYMBNep7L
Scan secret: af4afaeb40810e5f8abdbb177c31a2d310913f91cf556f5350bca10cbfe8b9ec
Spend secret: d39758028e201e8edf6d6eec6910ae4038f9b1db3f2d4e2d109ed833be94a026
$ sx mktx txfile.tx --output vJmwY32eS5VDC2C4GaZyXt7i4iCjzSMZ1XSd6KbkA7QbGE492akT2eZZMjCwWDqKRSYhnSA8Bgp78KeAYFVCi8ke5mELdoYMBNep7L:100
Added output sending 100 Satoshis to 1BjqrpQqr4tY5YPQkL8aG7NGkFbTbiuVu.
$ sx fetch-stealth
ephemkey: 0276044981dc13bdc5e118b63c8715f0d1b00e6c0814d778668fa6b594b2a0ffbd address: 1DUhzP41otHNKijH4B6dZN1SRVuYJyYfrp tx_hash: 63e75e43de21b73d7eb0220ce44dcfa5fc7717a8decebb254b31ef13047fa518
ephemkey: 024398667c6a11652ae80fe6370e140cc67d4f82fb8310122cdaddae1524dad9e0 address: 1Nw1EKu8Y6mPGhMGyrKPS9TZWDyTPLvi8a tx_hash: 6a6246ccc7cb9427efee85dd3c7b80164f8a61213a7ce357b8cfd3816f59aab9
...

Code:

$ SEED=$(sx hd-seed)
$ echo $SEED
xprv9s21ZrQH143K3YEx9tNjNtm6FJJHWuKRMmnXw42Eq6RiKt7oRpkKViHPJDnVvVZweqnjxEn6UsFLmztqCc5STduaMMGbwxgwMEkR8xM5wbK
$ echo $SEED | sx hd-seed | sx hd-priv 0 | sx hd-priv 0 | sx hd-priv 1 --hard
xprv9zShfTYMrPQdXBs1x4zYcf99DGyvykdvYxfdovarBZTh7RTZZ5vNgrdS4eQDPTxN9YnjSzfjVf6eWvEKuNubwLUoEYNg5cDfKp5RQVmYj2x

Code:

$ sx help
...
EC MATH
   ec-add-modp                Calculate the result of INTEGER + INTEGER.
   ec-multiply                Multiply an integer and a point together.
   ec-tweak-add               Calculate the result of POINT + INTEGER * G.

Install globally:

Code:

$ wget https://sx.dyne.org/install-sx.sh
$ sudo bash install-sx.sh

Install locally (non-root):

Code:

$ wget https://sx.dyne.org/install-sx.sh
$ bash install-sx.sh usr/

Topic: Stealth address with SX (anonymous payments) - page 6. (Read 25919 times)