Anonymous usage tokens from curve trees or autct

fcmp-plus-plus/crypto/fcmps at develop · kayabaNerve/fcmp-plus-plus · GitHub for my own works for reference. If you redid the first layer (our first layer handles the key, a key image generator, and an amount commitment), it’d be applicable here.

Speaking of the key image generator, the above falls victim tor related-key attacks assuming the generator J is constant. This means people who create two outputs under a stealth address protocol (presumably such as Silent Payments) can then detect if those outputs are used in a protocol which requires publishing a linking tag. That’s why Monero uses a per-output key image generator (which the linked work handles).