Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [confidential-transactions]

System originally designed for Bitcoin by Blockstream developers to hide the amount of transactions from everyone besides the transaction participants. Confidential Transactions combined with Ring Signatures (RingCT) are now implemented (in GitHub) and being tested for Monero.

2
votes
1answer
119 views

Why is it necessary in confidential transactions to have two generators?

So as i understand it (though im not sure if its the same w/ bulletproofs so please correct me if im wrong), a commitment is generated like this; commitment = (blinding_secret . G) + (value . H) ...
1
vote
1answer
35 views

How would I exploit the fact that I knew the scalar used for H in the Pedersons Commitment w.r.t G?

If H was badly chosen for the Pederson Commitment, such that the attacker knew a k where H = kG (1) What damage could be done to the system? We know that C = aH + bG If I commit a = 10 and b = 2 ...
2
votes
1answer
29 views

How does signing the hash of the public key show that the signer knew the private key?

I had this previously explained to me, however I do not think I understand it at all. Taken from Maxwell's confidential values: "If a signature is constructed so that the 'message' is the hash of ...
1
vote
1answer
18 views

Why must each input have a separate set of decoys?

If we have a mixin of 6, with two inputs. We immediately have a total of 6 * 2 = 12 decoys Would it not be secure enough to have the 4 decoys with the two inputs which means two key images? So we ...
1
vote
1answer
38 views

How are transactions validated in monero vs bitcoin?

Bitcoin In bitcoin, the signature is a "normal" one and we check it against the signed tx hash. We then check whether the public key/s which signed it, owns the input/s. we then check whether the ...
1
vote
1answer
62 views

The entire lifecycle of an XMR transaction with RingCT

I'm trying to understand the data structure in monerod and create a simple workflow for a transaction's life cycle. It doesn't look like this has been done post-RingCT activation, and I see a lot of ...
3
votes
1answer
91 views

What exactly are bulletproofs replacing in monero?

I am stuck on these questions in understanding bulletproofs: Are bulletproofs a way to hide the sender and the amount? What is the difference between bulletproofs, RingCT and Ring signatures? Edit: ...
2
votes
1answer
52 views

Hiding transaction values using pederson commitments and range proofs in accounts model

Conceptually how does one hide transaction values using pederson commitments and range proofs in ethereum(accounts model)? The key issue is how can we make it happen in an accounts model and not in ...
2
votes
2answers
52 views

Privacy implications resulting from lack of xmr.to multiple output function

When sending Monero the confidential transaction feature of RingCT hides thetransaction amount. Is there a privacy leak with the current xmr.to setup that weakens that claim? Assume an online ...
2
votes
1answer
145 views

What is the “SpendProofV1…” or “OutProofV1…” in the details of a sent transaction in the GUI?

I'm guessing it's either the Confidential Transaction range-proof? Or is it some kind of proof-of-payment I can send to the recipient to prove... payment...? Either way, what privacy or security is ...
6
votes
1answer
169 views

Transaction structure: Question about ecdhInfo

This question by kenshi84 shows how the pseudoOuts and outPk fields can be validated by anyone (without knowing any of the private keys involved), by checking that sumIn === sumOut: > var H = ...
5
votes
1answer
161 views

Would a fixed ring size improve anonymity?

Currently the ring size of a transaction can be set by the sender. One would think that using a ring size of 10 makes the transaction more anonymous than using a ring size of 5 (current default) as ...
1
vote
0answers
99 views

Intentionally reveal unspent transaction outputs (UTXOs)

As per this discussion I learned it is not possible in Monero to count the total unspent transaction outputs (UTXOs) in the blockchain to verify the total coin supply. I can understand that this is ...
9
votes
1answer
440 views

Are Confidential Transactions in Monero perfectly binding or hiding?

Bitcoin contributor Pieter Wuille recently commented on Reddit: Bulletproofs and the Pedersen commitments they operate on are perfectly hiding, but not perfectly binding. This roughly means that ...
2
votes
1answer
173 views

Monero transaction from kraken to bitfinex stucks in status confidential transaction

My Monero transaction sucks since 2 months and I have no idea how to get my coins back. Bitfinex support does not answer and according to kraken support moneros were send successfully. Find my ...
3
votes
2answers
459 views

What all information we can gather from a Monero wallet address?

I am pretty new to this crypto currency. My question is that what all information can be found, if we only know a malicious user's Monero wallet address? Can I check this Monero wallet balance? If ...
0
votes
1answer
250 views

What happend to my transaction

I bougth some Monero on poloniex to send to my paperwallet some months ago. Today I checked my paper wallet on mymonero.com and there is balance 0. When I check my transaction on moneroblocks, it says ...
6
votes
3answers
357 views

How does RingCT work with / without coefficients?

I was trying to get more information on how RingCT works, I found the thread I linked to below here on the stack exchange. In the other thread, the most upvoted answer explains it as a coefficient, ...
5
votes
1answer
248 views

Confidential transaction shows amounts

My understanding is that confidential transactions "hide" the amount exchanged. However I have found a confidential transaction where the input amount is visible. Is that expected?
15
votes
1answer
882 views

Can I manually check consistency of Pedersen Commitments in RingCT?

Even though I fully trust the math behind RingCT and I know no moneroj can be created out of thin air, sometimes I'd like to see for myself the consistency of the Pedersen Commitment before/after any ...
28
votes
4answers
2k views

How much larger are Monero transactions compared to the average Bitcoin transaction?

We know that because of the way Monero's privacy works, transactions are larger than a Bitcoin one, but how much larger on average are they compared to Bitcoin transactions? How will this affect the ...
17
votes
1answer
2k views

What is RingCT and how does it compare to Confidential Transactions?

What is RingCT and how does the addition of Ring Signatures enhance the privacy properties of RingCT compared to Confidential Transactions as designed by Greg Maxwell? https://people.xiph.org/~greg/...