Getting ecash without an MTB account

Jeremey Barrett jeremey at
Mon Aug 11 01:19:01 PDT 1997


At 09:26 AM 8/11/97 +0200, Mike wrote:
>I would have two accounts at MTB, one for savings and one for transactions.
>I want to give away a million bucks, so I deposit that amount in the
>transactions account. Then I give the account password to the receiver, he
>withdraws the money, and I change the password so he can't get any more
>money from me. I trust the receiver not to change my password, but if he
>does change it, then I can simply ask MTB to change it back, explaining
>that I lost my password.
>Would this work?

Should work just dandy, with this note: You must destroy your wallet
on disk for the transactions account and recreate after every
"transfer" is complete. This is because the sequence numbers on mint 
messages will not match and the MTB client will complain about it and 
reject the messages. However, you can re-create your wallet with
no problems at all. 

(Note to Digicash developers, if you're reading, please allow any
sequence number greater than or equal to the expected value in future
wallets. There is a really obscure and damned difficult attack that
can be mounted against this, but the alternative is a non-portable
wallet. Not being able to have an arbitrary number of wallets for 
the same account is mucho annoying).

BTW, there are better solutions to operating without a mint account,
but they are not widely available yet.


Version: PGP for Personal Privacy 5.0
Charset: noconv


Jeremey Barrett                                BlueMoney Software Corp.
Crypto, Ecash, Commerce Systems     
PGP key fingerprint =  3B 42 1E D4 4B 17 0D 80  DC 59 6F 59 04 C3 83 64

More information about the cypherpunks-legacy mailing list