waxwing · 2w Sorry on reflection that was a bit dumb; a ring sig wouldn't allow apportioning blame either. I found the old coinshuffle paper to be quite insightful on this difficulty. /dev/fd0 @/dev/fd0 1770295344 Basic implementation that could be improved further: https://gitlab.com/invincible-privacy/joinstr/-/merge_requests/16