If I understand correctly, the participants of a ring signature will be just other outputs. But I don't understand the criteria for selecting those outputs.
Add a comment
|
1 Answer
If I understand correctly, the participants of a ring signature will be just other outputs.
Correct. Well, more specifically also commitments.
But I don't understand the criteria for selecting those outputs.
Aside from decoy outputs needing to be at least 10 blocks confirmed (e.g. spendable), the decoy selection algorithm is designed to select outputs from across the blockchain based on observed spending patterns, as recommended in Möser et al.