[SDC] ShadowCash | Welcome to the UMBRA

[child_harold]

"The people who are crazy enough to think they can change the world are the ones that do."

Dedicated to Ryno, Techovert, the Team and this Community.


https://www.youtube.com/watch?v=tjgtLSHhTPg

[1714904669]

1714904669

[1714904669]

1714904669

[1714904669]

1714904669

[1714904669]

1714904669

[RiverBoatBTC]

wow this coin is all cool and shit even has a room on anonymous' IRC server

[ffmad]

We are anonymous 

[ozkraut]

We are anonymous 

Oooooh yeah baby -> unknown.....not even a shadow

[traumschiff]

This seems epic.  I wonder why ShadowCash is not getting much attention yet.  Seems like the price is way undervalued.

By my opinion,  we are trading at 1/10th our proper value with this tech in this space.  Perhaps even more than that.  I think its only a matter of time.    But the sooner the better.

+1

Technological advancements like these should result in a slow and steady rise fow days / weeks. Problem is the altmarket is drained out of volume, but if this coin doesn't succeed nothing will on the long run.

Ryno should post in r/darkmarkets imho and tell them about the tech and how it is useful (+ it's on the mainnet). Outside investments are important and that could be SDCs main source for it.

[deliveryman]

This seems epic.  I wonder why ShadowCash is not getting much attention yet.  Seems like the price is way undervalued.

By my opinion,  we are trading at 1/10th our proper value with this tech in this space.  Perhaps even more than that.  I think its only a matter of time.    But the sooner the better.

+1

Technological advancements like these should result in a slow and steady rise fow days / weeks. Problem is the altmarket is drained out of volume, but if this coin doesn't succeed nothing will on the long run.

Ryno should post in r/darkmarkets imho and tell them about the tech and how it is useful (+ it's on the mainnet). Outside investments are important and that could be SDCs main source for it.

Thats a really good idea actually. Lots of openminded people over there

[Schild_]

This seems epic.  I wonder why ShadowCash is not getting much attention yet.  Seems like the price is way undervalued.

By my opinion,  we are trading at 1/10th our proper value with this tech in this space.  Perhaps even more than that.  I think its only a matter of time.    But the sooner the better.

Incredible... People still don't get how game changing shadow is...

[drAGon925]

@Schild_   Do not expect a quick understanding

@Skaia     Holders are Hodling, be patient, Rome was not built overnight

Well done and congratulations to the devs and team!!!

[Pline]

A lot of the other so-called anonymous coins never felt right to me.  My gut tells me SDC is where its at, especially after this implementation. I was never impressed with coinjoin. Zero-knowledge is where its at. These devs are doing big things and have the right vision for the future.  Ryno seems like a super cool dude also.  I just hope the market will not be so stupid.  Paycoin seems like a scam, and has 80 million market cap right now, yet SDC only 500K, its insane.

[zuyfg888]

Maybe people want dump sdc,Buy Xpy.

[Alty]

Hats off to the devs of ShadowSend v2

Testing has proved that conversion from SDC > Shadow, Shadow > Shadow and Shadow > SDC works flawlessly on mainnet. Transactions happen very quick and they are completely unlinkable on the blockchain.

Finally a way to transact privately and securely.

Ryno and Technovert working on SDC = Masters of The Coin 2015

[ffmad]

Hats off to the devs of ShadowSend v2

Testing has proved that conversion from SDC > Shadow, Shadow > Shadow and Shadow > SDC works flawlessly on mainnet. Transactions happen very quick and they are completely unlinkable on the blockchain.

Finally a way to transact privately and securely.

Ryno and Technovert working on SDC = Masters of The Coin 2015

Now we should just spread the word everywhere ! 

[LiteBit]

Fork has happened and went seamlessly.

Remember to update to at least 1.3.0.5 or you're on the wrong blockchain!

http://shadowtalk.org/topic/296/shadowcash-zero-knowledge-anonymous-distributed-e-cash-via-traceable-ring-signatures/2

[Automatic Monkey]

Maybe people want dump sdc,Buy Xpy.

Sure, I can't wait to get some XPY. It's just like using a credit card, but without that all that buyer's protection.

[Cornett]

Maybe people want dump sdc,Buy Xpy.

Sure, I can't wait to get some XPY. It's just like using a credit card, but without that all that buyer's protection.

Lol  you made me laugh

[fearcoka]

Maybe people want dump sdc,Buy Xpy.

Sure, I can't wait to get some XPY. It's just like using a credit card, but without that all that buyer's protection.

Even better, send me your credit card information and Ill buy some XPY for you. Since you don`t know me, we can say this is an anonymous transaction.

Ill send your XPY once purchased. xD

[Longenecker]

Why wouldn't you just delete the line "when clearly there is no more NIZKP in the source than exists in Monero's keyimage system." instead of striking through since it is obvious fud? Advertising, that's why.

Because anyone that gets email notifications has the full text of what I said anyway. If you'd prefer, I'll gladly remove the strikethrough, since the point is valid. Also, if there's a miraculous advancement in NIZKP implementation in the source please do point it out to me and I will absolutely publicly admit my gross inability to notice it.

Hi Fluffy,

I just spoke with SDCDev regarding the comment above:

"it's in 'generate signature' (https://github.com/SDCDev/shadowcoin/commit/317b9b1f5121ecde162fd8d37fbd587182c45fef), its just the hash commitment from the signature... we don't have snarks or full zero knowledge, just a zero knowledge proof. The keyimage is the tag.. the zkp is the whole construction of tag... the algorithm in the paper pretty much translates directly to the code" - SDCDev


WP: http://shadow.cash/downloads/shadowcash-anon.pdf

Note: SDCDev has stated he will be responding himself with a clearer explanation.


Rynomster or anyone else: Feel free to correct me wherever I'm wrong as this is also a learning process for me.

AFAIK Cryptonote doesn't destroy or mint coin during its process. If I'm correct, then this is the biggest difference between the two schemes.


My understanding of Shadowcash:
Shadowcash is similar to Zerocoin in the sense that it uses anonymous token system to destroy SDC then mint new Shadow (SDC-to-Shadow); However, unlike Zerocoin, it doesn't require a trusted setup to convert Bitcoin into newly minted Zerocoin.

Below is an image of the Zerocoin minting process:


(continued)

The Shadowcash network destroys the SDC and mints Shadow in it's place (SDC-to-Shadow) via smaller denominations of Shadow Tokens (Shadow) equal to that of the destroyed SDC. These Shadow Tokens (SDT) make up the members of the ring signature. The newly minted Shadow tokens have no link to the destroyed Shadowcoin, because it is sent to dual-key stealth address. Non-interactive zero knowledge proofs (NIZKPs) are used when sending Shadow-to-Shadow between Stealth Addresses; Furthermore removing linkability between parties. The only way to redeem Shadow is to provide ownership of the tokens through ownership of the address via a traceable ring signature. Thus, if you don't own the address containing the Shadow then the network won't allow you to mint (redeem) new Shadowcoin (Shadow-to-SDC).

How can anyone be sure that there are no "phantom tokens"? Who is going to control the creation of these tokens? Is it all based on trust, are you serious? wtf

they can only be created by sending SDC -> Shadow, there are api:

>shadowcoind help anon
anoninfo [recalculate]
anonoutputs [systemTotals] [show_immature_outputs]
estimateanonfee <amount> <ring_size> [narration]
reloadanondata
sendanontoanon <stealth_address> <amount> <ring_size> [narration] [comment] [comment-to]
sendanontosdc <stealth_address> <amount> <ring_size> [narration] [comment] [comment-to]
sendsdctoanon <stealth_address> <amount> [narration] [comment] [comment-to]

and in the wallet there is a chain data page, which shows all the anonymous outputs in the system.

Shadowcash doesn't seem similar to cryptonote other than the use of ring signatures. IMO, ShadowCash seems more advanced in it's implementation vs Cryptonote because Shadowcash destroys the inputs (SDC) and creates anonymous outputs (Shadow).


From the Monero thread regarding I/Os:

So miner(or anybody) knows sum of all spent inputs and outputs ?

The ins and outs each have amounts, so you can add that up.

Am I right ?

Transaction
input(a1=5 XMR, random=6 XMR) output( g1=3 XMR, a3=1 XMR, keyImage_a1 )
ringSing(pub a1, pub random and private a1)

using VER and LNK everybody can verify that a1 holds 5 XMR, so I'm able to spend 4 XMR and miner can take 1 XMR fee ?

implies a1 was used (because I can't spend random)
implies a1_priv * H_p(A1_pub) = keyImage_a1

Am I missing something ?

I'm not sure of your notation here Is 'random' a foreign output used for a ring sig? In that case, that's not how it works. Each input uses a separate ring sig, with other outputs of the same same.

And what does g1 (or a3 for that matter) denote on your output?

yes I want use "foreign output used for a ring sig" to obscure transaction. I'll pull it from block chain.
g1(I pay for god) and a3(my new address)  does not matter.

Okay well like I said, each input will have it own set of foreign outputs used for mixing. Such outputs will all be of the same size, so this doesn't change the amount of the transaction, just its possible funding sources. Perhaps you want to revise your example?

Please can you make example:
1) I have unspent output  5 XMR, I want to pay 3 XMR for goods and 1 XMR transaction fee.
2) I want obscure my payment with 1 foreign input what holds 6 XMR.

You can't do #2 with the the protocol works today. There is a modification from gmaxwell that allows using foreign outputs of different sizes but it isn't implemented anywhere AFAIK.

Your foreign ouputs need to be of the same size.

So we would have (borrowing some of your notation)

tx(input(ring(a1(5 XMR),f1(5 XMR),f2(5 XMR),f3(5 XMR)) -> output(r1(3 XMR),c1(1 XMR)))

a1 = our own upspent output
f1..f3 = foreign outputs of size equal to a1
r1 = output owned by recipient
c1 = change output owned by us

We could also include additional inputs (and generate more change) if we wanted to further obscure the amount of the transaction.

Did you forgot to add  keyImage for a1 ? Or how can be this transaction verified ?

Like I said before, understanding this scheme has been a learning process for me. If I'm incorrect in any of information, Ryno or anyone else please feel free to correct me.

I spent the better part of the day preparing a guide/explanation slide presentation (draft) that goes over the flow from start to finish. The information in the presentation comes from the WP and IRC, so I'm sure it's 100%. Ryno still needs to verify everything though.

I think the visualization of the process will help people understand the groundbreaking innovation made here and more importantly - how to use it. It's truly a unique system.

(1st Draft and will edit accordingly)
https://docs.google.com/presentation/d/1yX2jN618Rnzs4g2ri_utdKdHbny6-xnRcPhOuhLNGB0/edit#slide=id.g577a31a2a_086

I'm working with crz to create a proper technical infographic that shows the process similar to the zerocoin and cryptonote images above. Not sure when those will be released but feel free to donate to crz!  http://shadowtalk.org/topic/74/new-branding-wallet-logo-icons-visuals-infographics-media/12

Thanks!

Excellent post CST.  Worth restating is the fact that cryptonote simply obfuscates the outputs, whereas Shadow destroys them... a huge difference.

[Automatic Monkey]

Fork has happened and went seamlessly.

Remember to update to at least 1.3.0.5 or you're on the wrong blockchain!

http://shadowtalk.org/topic/296/shadowcash-zero-knowledge-anonymous-distributed-e-cash-via-traceable-ring-signatures/2

Finally got it! The bootstrap does it's thing, turns out I had dropped it in a directory for an old user that no longer has a wallet.

So far, looks great! Transmissions take just a couple of seconds whether they are SDC or Shadow. Now I'm going to try it on Android on my phone.

The mined amounts are considerably larger, and I assume that is due to the large Shadow transfer fee being processed in the blocks and distributed to the stakers. Nice touch, that will help distribute the coin a bit.

One thing that isn't clear to me- the wallet doesn't seem to be telling me how much of my wallet balance is Shadow and how much is SDC.

[lolikop]

Shadowcash is an amazing anon coin soon to be more worth then DRK

[Schild_]

Maybe people want dump sdc,Buy Xpy.

Sure, I can't wait to get some XPY. It's just like using a credit card, but without that all that buyer's protection.

Even better, send me your credit card information and Ill buy some XPY for you. Since you don`t know me, we can say this is an anonymous transaction.

Ill send your XPY once purchased. xD

Has XPY any relation to paypal except typo and look alike name?