3
1
Moneropedia defines "ring signatures" as:
Ring signatures make sure individual transaction outputs on the blockchain can’t be traced. A ring signature is a group of cryptographic signatures with at least one real participant, but there is no way to tell which in the group is the real one as they all appear valid, while the key image prevents double spends. When sending a transaction, you select some random transaction outputs on the blockchain and mix those with your own “real coins”. Mixing of coins is enforced across the network, making all coins “equal”. Because every transaction output has plausible deniability on their state (spent or unspent), there are no fungibility issues with monero
To read how Monero gives you a privacy by default (unlinkability), see stealth addresses.
A group of cryptographic signatures with at least one real participant, but no way to tell which in the group is the real one as they all appear valid.
It sounds like Moreo's ring signatures are basically a way of building mixing right in. So, is Monero effectively the same as Bitcoin+mixers?
hey @Murch , could you pls elaborate on why that is a disadvantage? Blockchain bloat? – kumarz – 2016-12-08T15:29:40.453
1@kumarz: In Bitcoin the UTXO set has been about doubling each year for the past three years. This is with UTXO leaving the UTXO set when they are spent. In Monero, I'd expect this growth to be more pronounced for the TXO set (at similar levels of transactions), because transaction inputs don't shrink the TXO set. Other than the blockchain, the TXO set needs to be kept completely on each node to check whether inputs are valid. – Murch – 2016-12-08T15:41:11.577