where outputs are simply Pedersen commitments r*G+v*H,
and ownership is knowledge of their blinding factor r.
This require an interaction between sender and receiver to jointly construct a signature, but allows all spent outputs to be completely removed from blockchain history.
9 comments
[ 4.7 ms ] story [ 31.3 ms ] threadAnd monetary sovereignty.
i miss those times. it just too much work now to filter through the bullshit.
https://scalingbitcoin.org/papers/mimblewimble.txt
where outputs are simply Pedersen commitments r*G+v*H, and ownership is knowledge of their blinding factor r. This require an interaction between sender and receiver to jointly construct a signature, but allows all spent outputs to be completely removed from blockchain history.