+1, excellent posts, kmf. The biggest criticism I heard of Zerocoin is that the transactions are large (40 KB compared to normal transactions which are < 1 KB) and must be logged in the block chain. This greatly increases the computational power needed to confirm them. I believe the authors mentioned the sizes of the transactions could be reduced. Any idea by how much?