Security issues in Sarkar's e-cash protocol
We cryptanalyze all claimed security properties of Sarkar's e-cash protocol. We show that the protocol does not prevent modifying a coin's value. Similarly, the protocol does not protect user anonymity. Finally, the protocol does not thwart double spending. The protocol and its analysis make a simple realistic counterexample to e-cash design.
e-cash cryptography protocol cryptanalysis