Concrete instantiation of primitives for the public-investor privacy leakage profile

Identify concrete proof-of-reserves, proof-of-transit, and digital-signature schemes that instantiate the public-investor leakage profile L_pub used in Theorem thm:pub-privacy, demonstrating practical primitives and configurations that realize the theorem’s privacy assumptions and make the restricted privacy guarantee deployable.

Background

The restricted privacy theorem relies on abstract assumptions that PoR, PoT, and signature primitives admit zero-knowledge or witness-indistinguishable proofs for their public outputs; the paper sketches candidate approaches (e.g., SNARK/STARK) but does not commit to specific schemes.

The authors explicitly leave the task of pinpointing concrete primitives that meet the leakage profile L_pub and satisfy the theorem’s assumptions as future work, highlighting a practical gap to enable deployable implementations.