Kid Gloves or Megaphones

[Lucky Green]

At 19:58 5/4/96, E. ALLEN SMITH wrote:
>From:   IN%"shamrock at netcom.com" 21-MAR-1996 21:29:06.87
>
>>It is true that the issuer is unable to discover that double blinding is
>>being used. The real problem with the protocol is that it requires
>>payor/payee collusion, which may make it difficult to execute.
>
>        Can the payee discover that the payor isn't colluding before the bank
>can figure out who the payee is?

Yes, since the payee determines the serial numbers of the coins during
intitiation of the protocol. It is the payee that also assembles the final
coins. If the serial numbers are a match and the signature of the bank
verifies, then the protocol has been completed.


Disclaimer: My opinions are my own, not those of my employer.

-- Lucky Green <mailto:shamrock at netcom.com>
   PGP encrypted mail preferred.