Re:Zcash Open Major Grants
by Ar-Curunir on Monday December 07, 2020 @06:11PM
(#25339032)
> Monero uses known, audited cryptographic primitives, elliptic curve Diffie-Hellman over curve25519, EdDSA signature over the twisted Edwards variant of the same curve, libsodium.
The cryptographic primitives in zcash are also audited.
It's also the case that the cryptography underlying the next generation of zkSNARKs (which will be used by zcash) is the same as what Monero uses for range proofs; it's trustless (or low trust).
> Monero uses zero-knowledge proofs for the range proof, cryptographically protects the sender, receiver and notional.
Again, this is an over-simplification; the anonymity set is smaller, and moreover more difficult to analyze.
Re:Zcash Open Major Grants
by gtrhtrhtrhtr on Monday December 07, 2020 @06:48PM
(#25339410)
Monero is cool, but it has fundamental flaws: its anonymity set. And ring signatures is not standard crypto at all. Less complexity than zk-SNARKs for sure, but there's a trade off in confidentiality.
It's empirically better.
Monero uses zero-knowledge proofs for the range proof, cryptographically protects the sender, receiver and notional.
Monero uses known, audited cryptographic primitives, elliptic curve Diffie-Hellman over curve25519, EdDSA signature over the twisted Edwards variant of the same curve, libsodium.
Monero is much less likely to have a production exploit than zcash.
Are you saying if you needed to send money privately you'd actually choose Zcash over Monero?