# Revelio: A MimbleWimble Proof of Reserves Protocol
**URL:** https://forum.grin.mw/t/revelio-a-mimblewimble-proof-of-reserves-protocol/5192
**Category:** Research
**Created:** [June 12, 2019, 6:48pm UTC](https://forum.grin.mw/t/revelio-a-mimblewimble-proof-of-reserves-protocol/5192 "2019-06-12T18:48:57Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@0xb100d](https://forum.grin.mw/u/0xb100d)
#### Post date: [June 12, 2019, 6:48pm UTC](https://forum.grin.mw/t/revelio-a-mimblewimble-proof-of-reserves-protocol/5192/1 "2019-06-12T18:48:57Z")
_Arijit Dutta and Saravanan Vijayakumaran_
**Abstract:** We reveal Revelio, a new privacy-preserving proof of reserves protocol for Grin exchanges. By design, Revelio allows the detection of collusion between exchanges while hiding the identities of the outputs owned by the exchange in a larger anonymity set of outputs.
[https://eprint.iacr.org/2019/684](https://eprint.iacr.org/2019/684)
---
### Author:  [@lacroix](https://forum.grin.mw/u/lacroix)
#### Post date: [June 16, 2019, 10:41am UTC](https://forum.grin.mw/t/revelio-a-mimblewimble-proof-of-reserves-protocol/5192/2 "2019-06-16T10:41:26Z")
This is cool! Love the name too 😉
---
### Author:  [@Roelsmajor](https://forum.grin.mw/u/Roelsmajor)
#### Post date: [September 5, 2020, 5:52pm UTC](https://forum.grin.mw/t/revelio-a-mimblewimble-proof-of-reserves-protocol/5192/3 "2020-09-05T17:52:06Z")
[https://eprint.iacr.org/2020/938](https://eprint.iacr.org/2020/938)
**Performance Trade-offs in Design of MimbleWimble Proofs of Reserves**
_Suyash Bagad and Saravanan Vijayakumaran_
**Abstract:** Revelio (CVCBT 2019) is a proof of reserves protocol for MimbleWimble-based cryptocurrencies which provides privacy to a cryptocurrency exchange by hiding the exchange-owned outputs in a larger anonymity set of unspent outputs. A drawback of Revelio is that the proof size scales linearly in the size of the anonymity set. To alleviate this, we design RevelioBP, a Bulletproofs-based proof of reserves protocol with proof sizes which scale logarithmically in the size of the anonymity set. This improvement allows us to use the set of all UTXOs as the anonymity set, resulting in better privacy for the exchange. On the downside, the higher proof generation and verification time of RevelioBP than that of Revelio might affect practical deployment of RevelioBP. Through implementation of RevelioBP, we quantitatively analyse trade-offs in design of MimbleWimble proofs of reserves in terms of scalability and performance. We conclude that unless proof size is a concern for exchanges, Revelio is a marginally better choice for proof of reserves. On the other hand, if an exchange is willing to pay in terms of proof generation time, RevelioBP offers proof sizes significantly smaller than Revelio.
**Category / Keywords:** applications / Cryptocurrency, MimbleWimble, Grin, Proof of Reserves, Zero-knowledge Argument
**Original Publication**** (with minor differences):** IEEE Security & Privacy on the Blockchain 2020
**Date:** received 29 Jul 2020, last revised 4 Sep 2020
**Contact author:** suyashnbagad1997 at gmail com,sarva@ee iitb ac in
**Available format(s):**[PDF](https://eprint.iacr.org/2020/938.pdf) | [BibTeX Citation](https://eprint.iacr.org/eprint-bin/cite.pl?entry=2020/938)
**Note:** Added a section on faster verification of the RevelioBP proof of reserves using a single multi-exponentiation check.
**Version:** [20200904:140314](https://eprint.iacr.org/2020/938/20200904:140314) ([All versions of this report](https://eprint.iacr.org/eprint-bin/versions.pl?entry=2020/938))
**Short URL:** [ia.cr/2020/938](https://ia.cr/2020/938)