We present a new construction of divisible e-cash that makes use of 1) a new generation method of the binary tree of keys; 2) a new way of using bounded accumulators. The transaction data sent to the merchant has a constant number of bits while spending a monetary value 2ℓ. Moreover, the spending protocol does not require complex zero-knowledge proofs of knowledge such as proofs about double discrete logarithms. We then propose the first strongly anonymous scheme with standard unforgeability requirement and realistic generation parameters while improving the efficiency of the spending phase. © 2010 Springer-Verlag Berlin Heidelberg.
CITATION STYLE
Canard, S., & Gouget, A. (2010). Multiple denominations in E-cash with compact transaction data. In Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (Vol. 6052 LNCS, pp. 82–97). https://doi.org/10.1007/978-3-642-14577-3_9
Mendeley helps you to discover research relevant for your work.