[Lucrative-L] double spends, identity agnosticism, and Lucrative

[R. A. Hettinga]

--- begin forwarded text


From: "Patrick" <patrick at lfcgate.com>
To: <lucrative-l at lucrative.thirdhost.com>
Subject: [Lucrative-L] double spends, identity agnosticism, and Lucrative
Date: Tue, 29 Apr 2003 14:46:48 -0600
Importance: Normal
Sender: owner-lucrative-l at lucrative.thirdhost.com


	A quick experiment has confirmed the obvious: when a client
reissues a coin at the mint, both the blinded and its unblinded cousin
are valid instruments to the Lucrative mint.

	Example: Alice uses the Mint's API to reissue a one-dollar note,
blinding the coin before getting a signature, and unblinding the
signature afterwards. She's left with both a blinded and a non-blinded
version of the coin. The mint believes they are both valid. Instant,
unlimited inflation.

	I believe the solution to this is to have the mint track both
spent coins and issued coins (that is, it automatically cancels coins it
issues, before the client receives them). The client is left with no
choice but to go through a blinding and unblinding process in order to
have a usable coin.

	This seems to make identity-agnostic cash difficult or
impossible, at least with Lucrative:
http://www.io.com/~cman/agnostic.html,
http://cypherpunks.venona.com/date/1995/09/msg00197.html .


Patrick


The Lucrative Project: http://lucrative.thirdhost.com
......................................................
To subscribe or unsubscribe from this discussion list,
write to lucrative-l-request at lucrative.thirdhost.com
with just the word "unsubscribe" in the message body
(or, of course, "subscribe")

--- end forwarded text


-- 
-----------------
R. A. Hettinga <mailto: rah at ibuc.com>
The Internet Bearer Underwriting Corporation <http://www.ibuc.com/>
44 Farquhar Street, Boston, MA 02131 USA
"... however it may deserve respect for its usefulness and antiquity,
[predicting the end of the world] has not been found agreeable to
experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com