In-Reply-To: "Rick H. Wesson"'s message of Sat, 27 Aug 1994 19:04:21 -0700 <199408280204.TAA23729@ar.com>

The last on-line cash system I tried to work up didn't have a drop of anonymity to it, and I don't know how to blind the bank to the transactions but keep the thing reliable and secure...

Please look at Magic Money, which is an existing coded prototype which uses blind signatures to represent digital banknotes.

The canonical place to look for discussion of blinding is Chaum's article in CACM from maybe October 1985? Should be referenced in Schneier's bibliography. It's probably also available on chaum's web server (something-or-other.digicash.nl). Schneier also discusses the technology somewhat.