Jump to content
pedrorechez

Linking Wallets and Deanonymizing Transactions in Ripple

Recommended Posts

Hello Pedro.

Nice work, I am sure you are very smart guys and you have a great job done.

We however are here more interested in INCREASING of the privacy and RE-anonymization of the accounts and transactions.

Do you think you can have anything that goes towards that direction?

Edited by Duke67

Share this post


Link to post
Share on other sites
17 minutes ago, Duke67 said:

Do you think you can have anything that goes towards that direction?

We are working on several privacy-preserving solutions for credit networks such as Ripple. We  have shared (some of) them already with the Ripple community and the current version of the work is available at the corresponding projects websites. In the following, I point where you can find resources for each of them. If you are interested and have any question, feel free to ask and/or contact us.

* CreditMix/PathShuffle:

Ripple Forum: https://forum.ripple.com/viewtopic.php?f=2&t=16189&p=73008&hilit=creditmix
Project Website: http://crypsys.mmci.uni-saarland.de/projects/DecentralizedPrivPay/
 

* Whispers:

Project Website: http://crypsys.mmci.uni-saarland.de/projects/DecentralizedPrivPay/

* PrivPay:

Ripple Forum: https://forum.ripple.com/viewtopic.php?f=1&t=10302&p=64243&hilit=privpay
Project Website: http://crypsys.mmci.uni-saarland.de/projects/PrivPay/

Share this post


Link to post
Share on other sites
2 hours ago, pedrorechez said:

Hello,

we are Pedro Moreno-Sanchez and Aniket Kate (both from Purdue University, USA) and Muhammad Bilal Zafar (from MPI-SWS, Germany). We have performed a study that analyzes the globally visible Ripple ledger and characterizes the privacy attacks with the current Ripple network. This work is appearing at Privacy Enhancing Technologies Symposium (PETS 2016).

This is some fascinating work.  I might frame the visualization on page 6 - very colorful! 

Marketing services to re-anonymize transactions would be a logical next step after a study like this.  In face, I'm willing to be bet that this study was funded by such a business? 

Share this post


Link to post
Share on other sites

I know that there are a couple companies that will anonymize transactions for a fee on the Bitcoin network - on Ripple, such a service might be used at a high frequency by certain banks that feel they need to re-anonymize a category of transactions. I see dollar signs (or XRP signs!) 

Share this post


Link to post
Share on other sites

@pedrorechezThank you for your contribution to the Ripple community. Any academic examination of the Ripple network is appreciated as it benefits the network and creates additional awareness. Much of the paper is over my head, but it has raised a few questions/thoughts for me as a non-technical observer. 

1. Of the 959 clustered wallets, how many were involved in the ~729,000 (78% of 934,484) deanonymized transactions?

2. How many of those wallets belonged to the mentioned gateways? How many of the gateway wallets were public prior to your research?

3. Assuming half of the wallets were involved in the deanonymized transactions (guessing it's much lower), wouldn't that mean the anonymity has been maintained for more than 99.7% of wallets (not saying this is good)? 

4. Excluding wallets discovered via public disclosures and gateway related wallets, which are more public by nature due to their entry/exit point function on the network, what percentage of Ripple wallets remain anonymous?

5. How does the anonymity of the Ripple network compare to that of a private network of similar function like Visa when factoring in data breaches?

7 hours ago, Hodor said:

Marketing services to re-anonymize transactions would be a logical next step after a study like this

Guessing that such a service would make deanonymization exponentially more difficult.

Also, I noticed the references to xrptalk are all broken since the site was taken down. Maybe some some can be linked to the available archives:https://web.archive.org/web/*/Xrptalk.org

 

Edited by Xi195
sp

Share this post


Link to post
Share on other sites

This is great. Thank you for doing the research, taking the time to prepare such a well-written paper, and opening up the source code for the tools you developed in the course of your research.

Share this post


Link to post
Share on other sites

×