Hot answers tagged

57

As described by Monero Research Lab academic Shen Noether with regard to the anonymity set: Monero (although the zcash proponents note that a ring signature is a "smaller" anonymity set, they usually don't mention that the stealth address factor actually means that each transaction is masked, whereas the ring signatures provide additional ...


21

This question boils to down which selective transparency options both coins offer. I'll start with Monero. In Monero there are three tools for selective transparency, namely the viewkey (called the tracking key in the CryptoNote whitepaper (a,B)), key images (I = xHp(P)), and the private tx key (r). Note that the letters between parentheses correspond to the ...


17

Adding this answer to make it simpler to those who can not understand the top response. ZCash uses a new cryptography tool called zk-SNARK (don't worry about the name). This is different than the ring signatures that Monero uses. Without getting into too much detail, this is how they both work: zk-SNARKs use the entire blockchain when making transactions, ...


16

Yes it's definitely possible, but why create a whole new coin for that? A better idea would be to create a Zerocoin sidechain (post RingCT) for Monero that allows people to move their Monero into the sidechain, mix it and send it to anyone else on the sidechain, and then pull it back out. This would avoid the massive risk associated with ZCash's trusted ...


14

In fact Zcash does have viewing keys that allow to see all incoming transactions for a certain address. There is also a straightforward way to do proof-of-payment without changing the protocol, although we haven't implemented any RPC interface for that yet: https://github.com/zcash/zcash/issues/737 . Note that a proof of payment necessarily must be ...


12

Monero originally required a lot of RAM, because it stored the blockchain in RAM. Currently, Monero uses LMDB to store its blockchain. As a result, people are able to set up Monero nodes with only 512MB of RAM. When running, bitmonerod (the daemon) uses less than 100 MB of RAM. For Zerocash the requirement will be much higher for nodes that generate spend (...


10

Monero mixin 0 is still superior to a Zcash "T" transparent transaction due to the fact that Monero uses stealth addresses for every transaction whereas Zcash does not have this feature. I do not imagine there would be any scenario for Zcash to eliminate transparent transactions as this would break a lot of the intentional bitcoin compatibility that is ...


9

Do Monero and ZCash have different transaction fees? This is largely going to depend on the price, which is currently unknown because Zcash hasn't launched yet. However, on testnet the fee seems to be approximately 0.00005 TAZ (Zcash tesnet coins) per kB, whereas Monero currnetly has a fee of 0.002 XMR per kB. A more interesting comparison is transaction ...


5

Trustless means that you don't have to rely on a trusted party to say whether a given piece of information is correct (like your balance) or if a signature is valid. The way you trust a bank to correctly account your balance, for example. With blockchain-based cryptocurrency, anyone can indenpendently verify what goes on (the nodes of the network are doing ...


5

Another option would be to add a zero-knowledge protocol option, with no side-chain at all. This might be the least code-bucks for the most privacy-bang.


5

I believe it is likely to be possible for Zcash to eliminate the need for t-addresses for the vast majority of use cases. Of course that would be dependent on major performance improvements, as well as adding support for multisig z-addresses, but I believe those improvements are feasible in the medium term. Disclosure of interest: I'm a Zcash developer.


4

We applied for a trademark, and it almost got accepted, but then the now-defunct Moneero company got in the way. In our discussions with the Software Freedom Law Centre, who defended us against Moneero's threats, we learnt that there is a thing in trademark law (US specifically, but many other countries have a similar law) called the doctrine of equivalents. ...


3

The monero comparison wiki states zcash is not decentralized. Why? The link you posted in your question, if you scroll down the page, has a pretty thorough answer to the question. Most common criticisms of Zcash are the "Trusted Setup" and the "Founders Reward".


3

Concern has been expressed in the Zcash community that the NSA sponsored SHA-256 algorithm is being used for their coin. Here is an example: https://github.com/zcash/zcash/issues/706 A strange choice for a coin that supposedly claims privacy. There is much circulating on the Internet about SHA-256 and other SHA algorithms having open back doors. Monero ...


2

No. Monero uses Cryptonight whereas Zcash uses Equihash. They are different algorithms and most devices will compute them at different speeds, though for some devices they may happen to be close.


2

Monero's initial sync of a full node takes up to few days depending on your internet connectivity and also your hardware, which has to verify all synced blocks. When you loose your internet connection, close your wallet, switch off your device, for obvious reasons your wallet will not be syncing new blocks. But after you start it again, it will resume ...


1

As I understand it, if a mining operator was to attain 51% of the network, they can perform a double spend. This is one thing they could do, yes. But would this be detected? You cannot detect a 51% attack occurring. To perform a 51% attack, you'd have to mine a secret chain with greater difficulty than the main chain, then replay this secret chain on ...


1

Any hardware that is capable of mining Monero can also mine Zcash. But the used algorithm is different so you will need a different software. If you are using a pool it most likely doesn't make any difference. You just switch the mining URL. Another thing is that the two coins are at different difficulties because they are not the same age (and also because ...


1

Riccardo has mentioned that zk-SNARKs could be used in temporary sidechains. There is no official plan laid out yet to my knowledge.


Only top voted, non community-wiki answers of a minimum length are eligible