Bitcointalk

Not a suggestion

中本聪 · 2010 年 8 月 11 日

SN-2248 已核对来源,附原文与上下文。

阅读语言

还在琢磨这个想法……

Still thinking this idea through...

网络唯一要做的,是判断对某个 outpoint 的花费是不是第一次。

The only job the network needs to do is to tell whether a spend of an outpoint is the first or not.

如果我们愿意让客户端为自己的钱保存历史,那么有些信息也许不必由网络存储,比如:

  • 金额
  • 一笔交易中 inpoint 与 outpoint 的关联

If we're willing to have clients keep the history for their own money, then some of the information may not need to be stored by the network, such as:

  • the value
  • the association of inpoints and outpoints in one transaction

网络跟踪一堆相互独立的 outpoint。它不知道它们属于哪些交易、金额多少。客户端可以查询一个 outpoint 是否已被花掉,并提交一个令人满意的 inpoint 来标记它已花费。网络保存该 outpoint 和证明其已花费的第一个有效 inpoint。inpoint 对其关联的下一个 outpoint 的哈希和盐做签名,这样,如果你知道盐,就能私下出示「该签名签署了某个特定 next outpoint」;但公开地,网络不知道下一个 outpoint 是什么。

The network would track a bunch of independent outpoints. It doesn't know what transactions or amounts they belong to. A client can find out if an outpoint has been spent, and it can submit a satisfying inpoint to mark it spent. The network keeps the outpoint and the first valid inpoint that proves it spent. The inpoint signs a hash of its associated next outpoint and a salt, so it can privately be shown that the signature signs a particular next outpoint if you know the salt, but publicly the network doesn't know what the next outpoint is.

我认为客户端将不得不保存回溯到最初挖矿的全部历史。发付款的人得向收款人发送数据,同时还要与网络通信以标记 outpoint 已花、并检查这次花费是否为首次。也许数据传输可以用 e-mail 附件完成。

I believe the clients would have to keep the entire history back to the original generated coins. Someone sending a payment would have to send data to the recipient, as well as still communicating with the network to mark outpoints spent and check that the spend is the first spend. Maybe the data transfer could be done as an e-mail attachment.

客户端必须保存全部历史这一点削弱了隐私收益。经手大量钱的人仍然会看到大量交易历史。由于历史会回溯式地扇出,他们最后可能看到大部分历史。面额可以做得足够细以限制扇出,但经手大量钱的商家仍可能看到很多历史。

The fact that clients have to keep the entire history reduces the privacy benefit. Someone handling a lot of money still gets to see a lot of transaction history. The way it retrospectively fans out, they might end up seeing a majority of the history. Denominations could be made granular to limit fan-out, but a business handling a lot of money might still end up seeing a lot of the history.

来源
Bitcointalk 原始链接 ↗ 记录编号 SN-2248

阅读字号

选择适合你的字号,之后阅读会继续使用。