Can a RingCT signature of a transaction be slightly modified to create an equivalent transaction (same inputs, same outputs) with a different transaction id?

1 Answer 1


The transaction ID is based on the hash of everything in the transaction, and the MLSAGs sign everything in the transaction except the MLSAGs themselves.

Therefore, changing anything in the transaction will change the tx hash and thus the ID.

  • 1
    In Bitcoin, changing the ECDSA signature (r, s) of someone's transaction to (r, -s) gives an equivalent and valid transaction with a different ID. Is a similar thing possible with MLSAGs?
    – glv
    Commented Oct 16, 2016 at 9:31
  • 2
    @glv ECDSA signatures are known to be malleable, especially in Bitcoin's weird use case. Ring signatures are not known to be malleable in this way, as their underlying structure, although still relying on elliptic curves, is fairly different to ECDSA's.
    – bekah
    Commented Nov 25, 2016 at 20:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.