https://en.wikipedia.org/wiki/Ring_signature
sorry, federal government. Keep up
sorry, federal government. Keep up
Almost every cryptocurrency with sender-obfuscation features bumps up against "poisoned output" attacks for low enough anonymity sets: https://www.youtube.com/watch?v=iABIcsDJKyM
But it is good enough for many purposes. The goal is to provide a high level of plausible deniability for the sender.
I sure was.