<p>Yes, I believe that the accumulator constructions as described <a href="https://eprint.iacr.org/2018/1188" rel="nofollow noreferrer">here</a> are a good candidate. The same idea applied to Bitcoin is implemented by Tadge Dryja <a href="https://dci.mit.edu/utreexo" rel="nofollow noreferrer">here</a>  </p>

CC BY-SA 4.0
2019-07-27T17:14:10.010Z
That's really not what accumulators do. They're a mechanism for validating unspentness of individual, identifiable, separate UTXOs without maintaining an explicit database on them (and instead relying on proofs that they were indeed unspent). There are no privacy gains from that.
Pieter Wuille
CC BY-SA 4.0
2019-07-26T20:51:31.110Z
2019-07-26T20:51:31.110Z
felix
<p>My understanding of Schnorr signatures, Taproot and Graftroot and how they improve privacy in smart contracts / multi-sig is by allowing users to aggregate signatures so the individual signatures and keys are not visible but summed in the aggregate key / sig. </p>

<p>Are there any cryptographic protocols that allow the summing of UTXO inputs? So for example multiple inputs in a transaction were summed to one aggregate input and then signed with the sum of the input private keys? </p>

<p>Is it possible to improve privacy of UTXO consolidation? </p>

<privacy><utxo><schnorr-signatures><consolidation>
Is it cryptographically possible to have aggregate signature schemes that can improve privacy in UTXO consolidation?
crypt_chameleon
# Is it cryptographically possible to have aggregate signature schemes that can improve privacy in UTXO consolidation?

(Asked by: username_0 on 2019-06-01)

My understanding of Schnorr signatures, Taproot and Graftroot and how they improve privacy in smart contracts / multi-sig is by allowing users to aggregate signatures so the individual signatures and keys are not visible but summed in the aggregate key / sig.

Are there any cryptographic protocols that allow the summing of UTXO inputs? So for example multiple inputs in a transaction were summed to one aggregate input and then signed with the sum of the input private keys?

Is it possible to improve privacy of UTXO consolidation?

**Tags:** privacy, utxo, schnorr-signatures, consolidation


---

## 1 answers

### Answer by username_1 on 2019-07-26. Score: -2

Yes, I believe that the accumulator constructions as described [here](https://eprint.iacr.org/2018/1188) are a good candidate. The same idea applied to Bitcoin is implemented by Tadge Dryja [here](https://dci.mit.edu/utreexo)

> **Comments:**
> **username_2**: That's really not what accumulators do. They're a mechanism for validating unspentness of individual, identifiable, separate UTXOs without maintaining an explicit database on them (and instead relying on proofs that they were indeed unspent). There are no privacy gains from that.  

---

