8

Can a RingCT signature of a transaction be slightly modified to create an equivalent transaction (same inputs, same outputs) with a different transaction id?

9

The transaction ID is based on the hash of everything in the transaction, and the MLSAGs sign everything in the transaction except the MLSAGs themselves.

Therefore, changing anything in the transaction will change the tx hash and thus the ID.

  • 1
    In Bitcoin, changing the ECDSA signature (r, s) of someone's transaction to (r, -s) gives an equivalent and valid transaction with a different ID. Is a similar thing possible with MLSAGs? – glv Oct 16 '16 at 9:31
  • 2
    @glv ECDSA signatures are known to be malleable, especially in Bitcoin's weird use case. Ring signatures are not known to be malleable in this way, as their underlying structure, although still relying on elliptic curves, is fairly different to ECDSA's. – bekah Nov 25 '16 at 20:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.