Zion - Project Zion - CryptoNote-Based Tor Network Currency

View this thread on: d.buzz | hive.blog | peakd.com | ecency.com
·@moh-rokib·
0.000 HBD
Zion - Project Zion - CryptoNote-Based Tor Network Currency
<html>
<p><img src="https://ip.bitcointalk.org/?u=http%3A%2F%2Fi.imgur.com%2FdnGQewE.png&amp;t=568&amp;c=MhopUM14Qd8V9Q" width="1000" height="233"/></p>
<h1>&nbsp;<a href="http://project-zion.com/">http://project-zion.com</a>&nbsp;</h1>
<p>&nbsp;<strong>What is Project Zion ?</strong></p>
<p><br>
<strong>Zion</strong> &nbsp;is a cryptocurrency based on the Monero platform, which was forked from &nbsp;cryptonote a secure, private, untraceable cryptocurrency, which will be &nbsp;the primary sole used on the upcoming Tor marketplace codename <strong>Zion Marketplace</strong>, &nbsp;which is currently being purpose build, developed and vigorously &nbsp;security audited. Throughout the project i will refer to Zion the &nbsp;currency as <strong>Zion</strong>, and Zion the marketplace as <strong>Zion Marketplace</strong>. For those wondering, this project was renamed from <strong>MoneroClassic</strong> to <strong>Zion</strong> &nbsp;after a number members from the Monero community showed distress, and &nbsp;after careful consideration I've decided to steer away from using Monero &nbsp;in the project name, but give full credit for the codebase. I have &nbsp;great respect for Monero and its developers.<br>
</p>
<p><strong>Zion Marketplace</strong><br>
</p>
<ul>
  <li>Multi Seller/Vendor Support</li>
  <li>Seller &amp; Product Approval and Moderation</li>
  <li>An offline bitcoin vault</li>
  <li>Haggling feature</li>
  <li>Owner &amp; Seller Commission Management</li>
  <li>Rating &amp; Reviews for Sellers</li>
  <li>Responsive Design (possibilities for portable devices using the tor network)</li>
</ul>
<p><strong>The Plan</strong></p>
<p>The &nbsp;plan of attack for this project is to offer the marketplace to &nbsp;approximately ~150 of the current top vendors throughout AlphaBay and &nbsp;Dream Marketplace, offering no sign up fee to PGP verified top vendors, &nbsp;and no commission over the first ~3months. &nbsp;As you may or may not know &nbsp;Dream and AlphaBay have been suffering timeout and server overloads over &nbsp;the past few months and top vendors are looking elsewhere, this is &nbsp;where <strong>Zion Marketplace</strong> takes the fame. After the ~3month period &nbsp;of no commission to select vendors, commission will be used to place buy &nbsp;support on Zion in exchanges, creating a steadying buy-on-the-fly &nbsp;feature. The Zion &nbsp;platform will aim to fill in the gaps where other &nbsp;darknet marketplaces fail, 100% uptime, low commission &amp; a &nbsp;fluid/responsive design and of course a range of top &amp; unique &nbsp;vendors.<br>
</p>
<p><strong>Funding</strong></p>
<p>Project &nbsp;Zion will undergo a round of funding with a maximum of 151 BTC. At a &nbsp;base price of ฿0.0000080 per coin, 12,700,000 Zion will be available to &nbsp;purchase through our main website. Funding will be used for cryptonote &nbsp;development, tor project development &amp; ongoing maintenance &amp; &nbsp;community support.&nbsp;</p>
<p>Discount tiers available as follows<br>
Day 1 - 3 &nbsp;| &nbsp;฿0.0000080 per coin<br>
Day 4 - 6 &nbsp;| &nbsp;฿0.0000085 per coin<br>
Day 7 - 9 &nbsp;| &nbsp;฿0.0000090 per coin<br>
Day 10 &nbsp; &nbsp; | &nbsp;฿0.00001 per coin<br>
</p>
<p><strong>Funding Status:</strong> 26% complete | 39.26 of 151 BTC Raised. ( visit here &nbsp;&nbsp;<a href="http://project-zion.com/"><strong>http://project-zion.com</strong></a> &nbsp;for update the Crowdfunding)</p>
<p>&nbsp;</p>
<p><strong>Crowdfund participation: </strong><a href="http://project-zion.com/"><strong>http://project-zion.com</strong></a><br>
</p>
<p><strong>Exchanges</strong></p>
<p>I &nbsp;pledge to allocate ~5btc towards a premium listing on bittrex, and if &nbsp;desired i will also pay fund a premium yobit listing just to get us on &nbsp;multiple exchanges.&nbsp;</p>
<h1><strong>Currency Tech</strong></h1>
<p><strong>Features</strong></p>
<ul>
  <li>Untraceable payments</li>
  <li>Unlinkable transactions</li>
  <li>Blockchain analysis resistance</li>
  <li>Adaptive parameters</li>
</ul>
<p><strong>Academic and Theory</strong></p>
<p>Zion's &nbsp;functionality is backed up by academic research and cryptographically &nbsp;proven schemes. Much of this research is done by the Monero Research &nbsp;Lab. Since Zion was initially based on the Monero/CryptoNote protocol, &nbsp;the CryptoNote whitepaper is also an invaluable reference for validating &nbsp;Zion's unlinkability and untraceability claims.<br>
<br>
<strong>Monero/CryptoNote information</strong><br>
</p>
<ul>
  <li><a href="https://cryptonote.org/whitepaper.pdf">The CryptoNote Whitepaper</a></li>
  <li><a href="http://downloads.getmonero.org/whitepaper_review.pdf">Initial Review of the CryptoNote Whitepaper</a></li>
  <li><a href="https://lab.getmonero.org/pubs/MRL-0001.pdf">MRL-0001: A Note on Chain Reactions in Traceability in CryptoNote 2.0</a></li>
  <li><a href="https://lab.getmonero.org/pubs/MRL-0002.pdf">MRL-0002: Counterfeiting via Merkle Tree Exploits within Virtual Currencies Employing the CryptoNote Protocol</a></li>
  <li><a href="https://lab.getmonero.org/pubs/MRL-0003.pdf">MRL-0003: Monero is Not That Mysterious</a></li>
  <li><a href="https://lab.getmonero.org/pubs/MRL-0004.pdf">MRL-0004: Improving Obfuscation in the CryptoNote Protocol</a></li>
  <li><a href="https://lab.getmonero.org/pubs/MRL-0005.pdf">MRL-0005: Ring Signature Confidential Transactions</a></li>
</ul>
<p><br></p>
<p><strong>Specifications</strong></p>
<ul>
  <li>PoW algorithm: CryptoNight [1]</li>
  <li>Block reward: Smoothly varying [3]</li>
  <li>Block time: 240 seconds</li>
  <li>Difficulty: Retargets at every block</li>
</ul>
<p>[1] CPU + GPU mining (about 1:1 performance for now). Memory-bound by design using AES encryption and several SHA-3 candidates.<br>
[3] Uses a recurrence relation. Block reward = (M - A) * 2-20 * 10-12, where A = current circulation. Roughly 86% mined in 4 years (see <a href="http://i.imgur.com/lDqIdyd.png">graph</a>).<br>
</p>
<p><strong>FAQ</strong><br>
For a longer FAQ, check <a href="https://bitcointalk.org/index.php?topic=721045">Community FAQ</a></p>
<p><strong>What is CryptoNote?</strong><br>
CryptoNote &nbsp;is the technology that allows creation of privacy-centric &nbsp;cryptocurrencies. You can visit their website here. The level of &nbsp;anonymity provided by CryptoNote isn't possible with Bitcoin code base &nbsp;by design. Bytecoin (BCN) was the CryptoNote reference implementation, &nbsp;and XMC is based on BCN's code.</p>
<p>Two of the main features of &nbsp;CryptoNote are ring signatures that mask sender identities by mixing and &nbsp;one-time keys that make transactions unlinkable. Their combined effect &nbsp;gives a high degree of anonymity without any extra effort on the part of &nbsp;the user.</p>
<p>Unlike Bitcoin, your funds are not held in the address &nbsp;you give out to others. Instead, every time you receive a payment it &nbsp;goes to an unlinkable address generated with random numbers. When you &nbsp;decide to spend the funds in that one-time address, the amount will be &nbsp;broken down and the components will be indistinguishable from identical &nbsp;outputs in the blockchain.</p>
<p>For example if 556.44 XMC are sent, &nbsp;the protocol will break it down into 500 + 50 + 6 + 0.4 + 0.04 and a &nbsp;ring signature will be performed with other 500's, 50's, 6's, 0.4's, and &nbsp;0.04's in the blockchain. Unlike the "CoinJoin" mixing method, &nbsp;CryptoNote mixes outputs not transactions. This means no other senders &nbsp;need to be participating with you at the same time or with the same &nbsp;amounts. Any arbitrary amount sent at any time can always be rendered &nbsp;fundamentally indistinguishable (a mathematical proof is given in the &nbsp;white paper).</p>
<p>The degree of anonymity is also a choice rather &nbsp;than decided by the protocol: do you want to be hidden as one among five &nbsp;or one among fifty? The size of the signature grows linearly as O(n+1) &nbsp;with the ambiguity so greater anonymity is paid for with higher fees to &nbsp;miners.</p>
<p>Ring signatures are explained below. Reproduced from CryptoNote:</p>
<p>A normal signature looks like this. There's only one participant, which allows one-to-one mapping.&nbsp;</p>
<p><img src="https://ip.bitcointalk.org/?u=http%3A%2F%2Fi.imgur.com%2FdcbDq05.png&amp;t=568&amp;c=yTY69eYd8OZtGQ" width="855" height="201"/></p>
<p>&nbsp;A ring signature obscures identities because it only proves that a signer belongs to a group.</p>
<p><img src="https://ip.bitcointalk.org/?u=http%3A%2F%2Fi.imgur.com%2FavTQPnT.png&amp;t=568&amp;c=QSxjyXXe8AO3OQ" width="856" height="241"/></p>
<p>&nbsp;This allows a high level of anonymity in cryptocurrency transactions. You can think of it as decentralized and trustless mixing.&nbsp;</p>
<p><img src="https://ip.bitcointalk.org/?u=http%3A%2F%2Fi.imgur.com%2FioewLSY.png&amp;t=568&amp;c=S8P8DNMU77Jfpw" width="856" height="271"/></p>
<p>&nbsp;<strong>How does this compare to other anonymous solutions?</strong><br>
Ring &nbsp;signatures originate from the work of Rivest et al. in 2001 and the &nbsp;implementation in CryptoNote relies in particular on Fujisaki and &nbsp;Suzuki's work on traceable ring signatures. There are two other &nbsp;anonymity implementations currently available or in development. One is &nbsp;ZeroCoin/ZeroCash's use of zero-knowledge proofs. The others are based &nbsp;on gmaxwell's CoinJoin idea (such as mixing services for Bitcoin or the &nbsp;altcoin Darkcoin).<br>
</p>
<p><strong>1. Comparison with ZeroCoin and ZKP-based approaches:</strong><br>
You &nbsp;can read about ZeroCoin and zero-knowledge proofs (ZKP) here. The ZK &nbsp;environment allows an anonymity set that includes everyone in the &nbsp;network because the validity of an output can be proven without knowing &nbsp;the corresponding public key until it is spent. The largest risk is that &nbsp;this is recent research-level cryptography that hasn't been subjected &nbsp;to years of cryptanalysis, so exploits may emerge down the road. Ring &nbsp;signatures are much simpler and more mature, with many peer-reviewed &nbsp;papers published over more than a decade.</p>
<p>Other issues with ZKP &nbsp;include the RSA private key used to initiate the accumulator, which must &nbsp;be trusted to be destroyed by the generating party. It also obscures &nbsp;the entire economy, not just sender/receiver identities. If the ZK &nbsp;system is compromised, then an attacker can continuously spend coins &nbsp;that don't exist using false proofs. This damage is hidden from &nbsp;everybody due to total blinding and consequently at any given time it's &nbsp;not possible to know if the network has already been compromised. There &nbsp;is a tradeoff between these inherent risks and the maximal anonymity set &nbsp;provided by ZKP. CryptoNote aims for a different balance through the &nbsp;dual layers of privacy provided by one-time keys and ring signatures.<br>
</p>
<p><strong>2. Comparison with CoinJoin-based approaches:</strong><br>
XMC &nbsp;is more qualitatively similar to mixing implementations like CoinJoin. &nbsp;The differences arise in the departure from the Bitcoin protocol, which &nbsp;allows XMC to use new cryptography to provide decentralized and &nbsp;trustless mixing of superior quality. The critical problem with mixing &nbsp;services is the need to trust the operators. As an example, &nbsp;blockchain.info's mixer gives the following disclaimer: "However if the &nbsp;server was compromised or under subpoena it could be force to keep logs. &nbsp;If this were to happen although you haven't gained any privacy you &nbsp;haven't lost any either."</p>
<p>The CoinJoin-inspired Darkcoin performs &nbsp;mixing with selected "masternodes" since it still uses ordinary &nbsp;signatures that can be mapped one-to-one. The motivation is that a &nbsp;randomly selected node is less likely than a single service to exhibit &nbsp;bad faith (such as keeping logs) . In practice, a few VPS companies host &nbsp;the vast majority of nodes and this approach relies on the integrity &nbsp;and good behavior of these nodes. XMC's more fundamental cryptographic &nbsp;approach doesn't have these vulnerabilities and the quality of anonymity &nbsp;is much higher.</p>
<p>XMC's ring signatures are also far more secure &nbsp;and convenient than CoinJoin because they mix outputs not transactions. &nbsp;This means a transaction doesn't involve waiting around for other &nbsp;senders to mix with. Nor is a user restricted to mixing only if others &nbsp;are sending the same amount. Arbitrary amounts can be sent at any time &nbsp;without anyone else's participation. This feature makes a timing &nbsp;analysis of the blockchain useless.<br>
</p>
<p><strong>Overview of a transaction</strong><br>
Bob decides to spend an output, which was sent to the one-time public key. He needs Extra <strong>(1)</strong>, TxOutNumber <strong>(2)</strong>, and his Account private key <strong>(3)</strong> to recover his one-time private key <strong>(4)</strong>.</p>
<p>When sending a transaction to Carol, Bob generates its Extra value by random <strong>(5)</strong>. He uses Extra <strong>(6)</strong>, TxOutNumber <strong>(7)</strong> and Carol's Account public key <strong>(8)</strong> to get her Output public key <strong>(9)</strong>.</p>
<p>In the input Bob hides the link to his output among the foreign keys <strong>(10)</strong>. To prevent double-spending he also packs the Key image, derived from his One-time private key <strong>(11)</strong>.</p>
<p>Finally, Bob signs the transaction, using his One-time private key <strong>(12)</strong>, all the public keys <strong>(13)</strong> and Key Image <strong>(14)</strong>. He appends the resulting Ring Signature to the end of the transaction <strong>(15)</strong>.&nbsp;</p>
<p><img src="https://ip.bitcointalk.org/?u=http%3A%2F%2Fi.imgur.com%2FQFMVqRI.png&amp;t=568&amp;c=A_8XlKqCseuLgA" width="1857" height="884"/></p>
<p><img src="https://ip.bitcointalk.org/?u=http%3A%2F%2Fi.imgur.com%2F9E0EtWI.png&amp;t=568&amp;c=b8fePCZ2Xk7hoQ" width="300" height="100"/></p>
<p>&nbsp;<strong>Bounties/Translations</strong><br>
I require translations to other main &nbsp;language, no google-translate, please PM me for offer validity, i can &nbsp;offer 0.010 BTC per genuine authentic translation.<br>
</p>
<p><strong>Signature Campaigns</strong><br>
I require a signature campaign manager. Payment to be discussed via PM.<br>
</p>
<p><strong>Twitter Bounty</strong><br>
I can offer 0.003 btc per genuine thought out tweet with a cap of 100tweets in total. Must have decent following, upwards of 50.</p>
<p>Payed in either bitcoin or Zion, at your choice.</p>
<p><strong>Retweets</strong><br>
Official Twitter: <a href="https://twitter.com/PlanZion">https://twitter.com/PlanZion</a><br>
Retweets will gain a 5 Zion per retweet, only genuine accounts will be remunerated.&nbsp;</p>
<p><strong>Other advertising</strong><br>
If &nbsp;you believe you can offer another form of advertising which will be &nbsp;beneficial to the project, i can offer remuneration based on work &nbsp;involved, please pm me with what you can offer.</p>
<p>Steemit, users with a valid steemit account can PM me. Bounty can be discussed.<br>
Posting to bitcoingarden bounty can be discussed.<br>
Posting to bitcoin.pl bounty can be discussed.<br>
Media exposure/news exposure bounties can be discussed. &nbsp;</p>
<p>https://bitcointalk.org/index.php?topic=1604526.msg16107816#msg16107816</p>
<p>----------------------------------------------</p>
<p>website : &nbsp;<a href="http://project-zion.com/">http://project-zion.com</a></p>
<p>twitter : https://twitter.com/PlanZion</p>
<p>ANN bitcointalk : https://bitcointalk.org/index.php?topic=1604526.0</p>
<p>#news #ZION #Projectzion #monero #cryptonote</p>
</html>
👍 , , , , , , ,