I'm working on a prototype which will use MimbleWimble Confidential Assets transaction protocol using Cosmos as the blockchain layer.

In my prototype a user is always sending a whole amount to another user (so, one transaction has always one input and one output). Each user can have a public-private key.

  1. How can a sender generate a blinding factor (r) in a secure and non-interactive way (so even a sender himself can't know the r and spend the receiver transaction)? What's the state of the art?
  2. Additional question. If we don't record any addresses (so a transaction doesn't have any source account, only the commitments and range proofs), is the user anonymity preserved? So the external observer (assuming he can't link transactions with wallet IP addresses) will not learn anything about who is receiving the transactions.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.