December 22, 2021
Seraphis is a 'transaction protocol abstraction' that I have been working on (WIP draft paper available here). As an 'abstraction', Seraphis defines rules about how you can design a real (privacy-focused) transaction protocol without specifying concrete algorithms. For example, RingCT is another protocol abstraction (more or less), and there are different 'real' versions corresponding to signature schemes MLSAG and CLSAG. Seraphis is a candidate model for Monero's next transaction protocol.
Privacy-focused transaction protocols have two core structural rules.
Ever since RingCT was introduced, transaction protocols have had 'hidden amounts' by adopting the Confidential Transactions technique (the CT in RingCT). Key images, however, have seen recent innovations.
Triptych is a fourth-generation privacy-focused transaction protocol (following the Bitcoin, CryptoNote, and then RingCT models) with a new key image construction that permits 'one-of-many proofs' (which behave the same as ring signatures) with significantly better performance for large reference sets (large numbers of decoys) compared to what is possible with CryptoNote/RingCT-style key images. Note that, while the Triptych paper doesn't make a distinction between a 'transaction protocol' and a 'transaction protocol abstraction', Triptych represents a new abstract model following after RingCT.
Seraphis is, similarly, a fourth-generation privacy-focused transaction protocol (abstraction). Also like Triptych, it defines a new key image construction that permits efficient one-of-many proofs. However, there are a number of notable differences between Triptych and Seraphis.
When thinking about a possible implementation…
Lelantus-Spark is a transaction protocol (but not an abstraction - like how Triptych is not an abstraction) very similar to Seraphis, with the same pros/cons relative to Triptych. It was developed independently from Seraphis, for the most part.
Since they were developed at the same time, the question 'why Seraphis and not Lelantus-Spark?' can just as easily be stated 'why Lelantus-Spark and not Seraphis?' Practically speaking, the authors of Lelantus-Spark have focused their attention on design details appropriate for the Firo cryptocurrency, while my design recommendations for Seraphis (in the paper) have focused on details appropriate for a cryptocurrency that currently uses standard RingCT (like Monero or MobileCoin1).
I first conceived of Seraphis, and wrote the paper's first draft, while an employee at MobileCoin. ↩
Post tags : Monero Research Lab, Community