Practical Compact E-Cash with Arbitrary Wallet Size.
Patrick Märtens · 2015
Abstract. Compact e-cash schemes allow users to withdraw a wallet containing K coins and to spend each coin unlinkably. We present the first compact e-cash scheme with arbitrary wallet size k ≤ K while the spending protocol is of constant time and space complexity. Known compact e-cash schemes are constructed from either verifiable random functions or bounded accumulators. We use both building blocks to construct the new scheme which is secure under the q-SDH, the y-DDHI and the SXDH assumptions in the random oracle model.