The Monero privacy protocol
What the chain hides and how: rings and key images, one-time addresses and view tags, commitments and range proofs, and the full-chain proofs meant to replace the ring.
How Monero privacy works
Monero privacy rests on three mechanisms: ring signatures hide the output spent, one-time addresses the recipient and RingCT the amount. How each one works.
FCMP++: full-chain membership proofs
FCMP++ replaces Monero's 16-member rings with a proof over every output on the chain. How the proof works, what Carrot adds, and what Monero privacy gains.
Monero vs Zcash: two privacy models compared
Monero privacy is on for every transaction, in 16-member rings; Zcash hides only shielded transactions, but among every note in the pool. How the two compare.