Now that RingCT is on and transactions are many times bigger, would a mixin of 1, for example, be safe enough to keep a good level of privacy? I'm mainly asking because many pool operators have decided to opt out of RingCT (and usually have a mixin of 3). Some of them are loosing money on each block found.

Lowering mixin lowers tx fees, so I'm trying to know if it's a better solution than opting out of RingCT. Thanks!

1 Answer 1


As in my comment:

The transaction size is mainly determined by the number of outputs. The number of inputs and mixin have smaller impact on the tx size. To be more precise, each output comes with a range proof using Borromean ring signature containing 64 pubkeys (representing commitments of all digits) and 2*64+1 scalars. This amounts to 193 instances of 32byte data, i.e. 6kB per output.

Smaller mixin won't help in reducing the signature size. For example, see these two transactions with mixin 6 and 2, respectively:

The fees are exactly the same.

Also note that the protocol required minimum mixin is 2; mixin 1 is not allowed.

  • 1
    Noticed this too yesterday. In the first RingCT block (1220517), the mixin 2 transaction is actually larger than the mixin 4 transactions.
    – dpzz
    Jan 11, 2017 at 21:13
  • 1
    In this case because it has two inputs versus one.
    – kenshi84
    Jan 11, 2017 at 21:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy