3

CryptoNote 2.0 uses P=Hs(rA)G + B for the generation of a one-time key.

CNS006 seems te change this to P=Hs(rA||n)+B, where n is the transaction index (encoded as varint).

Why is there this additional concatenation; is this to conceal transactions to the same address?

Improve this question

1 Answer 1

Reset to default
3

The CNS006 is correct. In the past outputs had to be split into denominations and without concatenations that'd generate multiple identical outputs (of different amounts) to the same wallet, effectively burning all but 1. With the concatenation, it's guaranteed that outputs will be unique, even if going to the same address.

Improve this answer
1
  • 1
    So it is to "conceal" transactions to the same address before RingCT, I see. Thanks!
    – rubdos
    Commented Dec 13, 2017 at 12:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.