Intermediary Accounts
as defined in QuisQuis by Mieklejohn et.al. (2018)
Accounts from are shuffled with a specific permutation s.t. the sender account is on index , receiver accounts are on index and rest of the accounts, that are part of the anonymity set, over the index .
accounts are then updated using a vector of random scalar values for all the public keys in the input and a single random scalar , for all the zero balance commitments using the updated public keys.
The property of guarantees that the updated accounts cannot be linked back to their parent accounts.
Public keys from the accounts are used to commit on a value vector , where is arranged in the same permutation as .
In QuisQuis, they use the same random scalar to commit on equal values in and .
Epsilon accounts are also a commitment over but with globally available generator points g
and h
. These accounts help the verifier
to check the dot product of all commitments is an identity elements s.t.
In order for the above to be true, the prover does a trick with the blinding factor, where it sets the last random scalar as .
Intuitively, these accounts are the product of the commitments from and s.t. . The public keys for all three account types remain the same .
For example, if value in sender's account is and the value committed in the is . Then the dot product of the above commitments will result in a commitment of following the additive homomorphic property of the commitments.
Last updated