New Service: (amost) trust free tor based blind bitcoin mixer -- TESTNET only

[BlindMixerDR]

I am announcing a new bitcoin mixing service using Chaum's blind signature scheme. Since it is not allowed to announce tor urls on bitcointalk, you can view the url on reddit here.

[BlindMixerDR]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

The website has a "Certificate Authority" signing key to certify the RSA keys used on the site. Here it is:

- -----BEGIN CERTIFICATE-----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- -----END CERTIFICATE-----

There is one master PGP encryption key, and all other keys get authority from that. Here it is:

- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=DMTs
- -----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=25dx
-----END PGP SIGNATURE-----

[BlindMixerDR]

I need to say more about this service. The system operates on the basis of minimum trust. From the time you receive a MixAddress from the mixer, until the time you receive your new mixed coins, you need almost zero trust in the mixer.

The mix address you receive is signed by a key which can be traced to the PGP key posted here in the forum. So if you send coins there, we cannot deny the address belongs to us.

When you claim the transaction and send your new address to the mixer (the 'SinkAddress') this is also signed (blind signed) by the mixer. If you have the unblinded signature and we do not send you the new mixed coins, you can prove that we are scammers.

[BlindMixerDR]

Somebody has successfully sent coins to the mixer, and redeemed the new mixed coins. If they post the two transaction IDs (sending and receiving) and the value of RandomPrime to the reddit thread, they can have a reward of 0.01BTC.

edit: Really, all they need to post is the RandomPrime - I already know the two transaction IDs (only because there were only two transactions mixed and I made one of them. In the future when many people use the mixer this would not be possible).

The mixer has received 1.0, 0.5, 0.2, 0.1 and 0.05 BTC transactions (always testnet) - is it all the same person? The 0.05BTC transaction is now redeemed.