Why Nostr? What is Njump?
2023-05-10 21:50:21
in reply to

moonsettler on Nostr: thanks for the correction, will fix! yes, the first DLEQ Alice receives at the time ...

thanks for the correction, will fix!

yes, the first DLEQ Alice receives at the time the token is minted. however will not ask for the second immediately, that would be bad for her privacy.

so in theory it doesn't break unlinkability, because B' or C' can't be linked to C, and these two DLEQ-s don't happen in the same session. they would happen displaced in time. Someone would present C for Bob anyhow, Bob doesn't know if that is Alice or Carol. Bob may know that C' is related to a specific lightning invoice, but he has no idea that C is related to any such thing.
Author Public Key
npub1dgesr3zcgyjv2z0050h7auzdlf88gycry7tlk7wsypmgngy97yxqv4mccn