Tell me where im wrong here smart guys. Or if i right.
So you shouldn't need to actually use ring signatures very often. Say that we have 3 inputs in our wallet of 2, 4, 5 and monero. Say that we need to pay alice 10 monero.
We use alices public address plus nonce_a to generate 1_time_address_a and send our 5 monero input to it.
We use alices public address plus nonce_b to generate 1_time_address_b and send our 4 monero input to it.
We use alices public address plus nonce_c to generate 1_time_address_c and our own public address plus nonce_d to generate 1_time_address_d and send 1 monero from our 2 monero input to 1 _time_address_c and 1 monero from our 2 monero input to 1_time_address_d.
Nothing has been revealed about any parties involves. No ring signatures have been used. The only problem here is that transactions, over time, are becoming more and more dusty. So inorder to avoid creating more dust on the network, the only ring signature you would need to use is to send that 1 monero back to an address you already control instead of a new one that you have just created for yourself.
So you shouldn't need to actually use ring signatures very often. Say that we have 3 inputs in our wallet of 2, 4, 5 and monero. Say that we need to pay alice 10 monero.
We use alices public address plus nonce_a to generate 1_time_address_a and send our 5 monero input to it.
We use alices public address plus nonce_b to generate 1_time_address_b and send our 4 monero input to it.
We use alices public address plus nonce_c to generate 1_time_address_c and our own public address plus nonce_d to generate 1_time_address_d and send 1 monero from our 2 monero input to 1 _time_address_c and 1 monero from our 2 monero input to 1_time_address_d.
Nothing has been revealed about any parties involves. No ring signatures have been used. The only problem here is that transactions, over time, are becoming more and more dusty. So inorder to avoid creating more dust on the network, the only ring signature you would need to use is to send that 1 monero back to an address you already control instead of a new one that you have just created for yourself.
I think you still need ring signatures.
The one time addresses provide unlinkability so that the three payments made by Alice are not known to be sent to the same person receiving.
But the payments don't have untraceability since you can still see that Alice sent all three payments. If ring signatures were used (and assuming you used mixin > 0) then you have the case where an observer can't tell if Alice sent it or another party did.
Yea sure they would be linked if you made them all part of the same transaction. But you could do 3 separate transactions. That way you have unlinkability, untraceability, and no ring signatures (though still the aforementioned problem of creating dust).
