Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In ZCash each transaction is the same size, regardless of how large your anonymity set is.


Okay, that is an interesting perk, where could I read about that and come to the same conclusion? For some reason I don't recall the white paper explicitly saying that but it wasn't comparing itself to cryptonote to begin with.


It's a property of the zero knowledge proofs in question; they're called Succint Non-interactive Arguments of Knowledge because their size grows sublinearly with the size of the statement being proved. In the case of ZCash, the statement consists of proving things about the blockchain, and things are set up in such a way that the size of the proof used is 288 bytes, ALWAYS.


is this proof the one that also cannot be formed in a trustless way?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: