Questions tagged [key-image]
Questions about key images including how they are computed and how they are used to prevent the double spending of Monero
1
vote
2answers
27 views
How is the number of key images for a transaction selected?
I see that there are a few transactions that have many key images for each of the 11 ring members. But there are also a few with a lesser number of key images. How does this happen?
2
votes
1answer
54 views
Key Image and Ring Member
When were counting the number of ring signatures for a certain transaction do we count the number of key images or ring members of each key image?
1
vote
1answer
38 views
Does the Key Image leak privacy information?
If I Sign two different transactions with the same private key and send it to the same node. Would this node now be able to know which member of the ring is trying to sign?
As I believe the public ...
1
vote
1answer
86 views
The entire lifecycle of an XMR transaction with RingCT
I'm trying to understand the data structure in monerod and create a simple workflow for a transaction's life cycle.
It doesn't look like this has been done post-RingCT activation, and I see a lot of ...
1
vote
2answers
49 views
Can monero include actual spent input as previous transaction output?
Let's take we have two transactions. In the first transaction, it has 1 input with zero mixins and 3 outputs(stealth addresses). The second transaction has 1 input with one mixins and 2 outputs. Here ...
1
vote
1answer
61 views
How does key images work when you create a transaction using two or more of your previously unspent transaction outputs?
I've read key images are the critical element in Monero to avoid double spends.
I think I understand how it works when you are using only one of your previously unspent transaction outputs to create ...
1
vote
1answer
112 views
What keys are being used to create the key image and how is it verified?
So i'm trying to pin this down since yesterday and i simply cannot find a definite answer. Read dozens of posts and few papers specifically on this topic and while i developed a "belief" that it has ...
3
votes
1answer
94 views
Detecting the real output in ring signature
I have a strange question about the relation of P_i (stealth addresses in ring signature) with x (the one-time private key).
Suppose Alice wants to spend P_1 with her spend private key (x) and we ...
0
votes
1answer
67 views
wallet cli v0.12 : “ Error : Failed to import Key images”
I've already created some view only wallet using --generate-from-view-key and importing key images, but today i've an issue doing this last step with Wallet cli v0.12.
I've the following message when ...
5
votes
2answers
228 views
Understanding MLSAG in Monero transaction
This is a followup question to Understanding the structure of Monero transaction with emphasis on the MLSAG part.
Here's the transaction's structure again given with print_tx ...
3
votes
1answer
189 views
Is it easily provable by a third party that the key image used in a transaction is associated with the spent output without revealing the (P,I) pair?
What I'm getting at is I'd like to know how the Monero network can know that a key image used in a transaction is not either forged (probably an easy answer) or created from a different output owned ...
8
votes
1answer
446 views
How do key images really work?
I have the following questions regarding the equation I=xHp(P):
What is the hash function Hp?
How can we know that Hp(P) is a point on the Ed25519 curve? Or is it not?
Is the value I published with ...
10
votes
3answers
3k views
How does the recent patched key image exploit work in practice?
For more info https://getmonero.org/2017/05/17/disclosure-of-a-major-bug-in-cryptonote-based-currencies.html This has been patched months ago and was never exploited which can be proven by running a ...
5
votes
2answers
186 views
Key-image generation: What does p signify in I = xHp(P)?
According to the CN whitepaper key image I is generated thusly:
I = xHp(P)
I understand P is the one-time public key for the transaction, x the corresponding private key and H a deterministic hash ...
5
votes
3answers
738 views
Is making a key image public equal to giving the monero in that output away?
So I read about proving your balance to an auditor, and someone suggested that you can share your view key, exposing all outputs that you received on that address.
If you then give out all key images ...
4
votes
1answer
145 views
Can an output be used as a decoy after it has been spent?
The title of the question is probably specific enough, but I'll give more color anyway.
Here's a quick timeline.
I received output A a year ago.
In the last year, output A has been a decoy in 3 ...
3
votes
2answers
111 views
How can I check if a key image has been imported into a view wallet?
How can I check if a key image has been successfully imported into a view wallet, particularly a cold wallet that has never spent any of the funds it has received?
10
votes
1answer
155 views
Is it safe to share my key images with other people?
Let's say I run a charity that wants to show people how much money comes in and out of my Monero wallet. If I export the key images, is it safe to publish them on my website, or does doing so open up ...
7
votes
1answer
410 views
What signature prevents me from spending others' coins?
In passive mixing, the monero wallet finds n other parties and forms a ring signature that proves the signer is one of the parties in the ring, and hence entitled to spend from one of the accounts ...
3
votes
1answer
82 views
bad balanced CURRENCY_BLOCK_GRANTED_FULL_REWARD_ZONE constant
I have seen several Boolberry users report a wallet and daemon error similar to this one:
Wallet:
Error: transaction was rejected by daemon with status "Failed"
Daemon:
Transaction with id= ...
16
votes
3answers
3k views
What is a key image?
When a transaction is made with monero there is a 'key image' in the transaction info. what is this exactly? is it like the diffie-hellman exchange to create the one time addresses?
6
votes
1answer
226 views
What is the deterministic hash to EC function used to construct the key image?
Ring signatures alone would allow double spending, so Monero (as a result of following the CrpytoNote whitepaper) has to use a 'key image', which is the same across identical transactions and hence ...
1
vote
1answer
118 views
Trezor firmware, private view key, key image and privacy
It is my understanding that the Monero trezor firmware uses the private view key.
This might lead to some privacy concerns.
I have read that key image can be used to check balance of a paperwallet.
...
4
votes
1answer
408 views
What are the “ingredients” of a key image?
This is a scenario I've come up with to help me understand key images.
Let's say I have Wallet 1 and Wallet 2. Wallet 1 has TXO A and TXO B. I send TXO A and TXO B as inputs to Wallet 2. TXO B was ...
5
votes
2answers
888 views
Can the import\export key images command can be used to check the balance of a paperwallet?
The import/export key images command can be used to check the balance of a view only wallet.
But is there a way to use it to check the balance of an already set up Paperwallet?
Is it possible to get ...
7
votes
3answers
194 views
Does publishing view key and key images give the auditor the information on where I sent the funds?
I see here that it's possible to provide information to an auditor to prove the balance at a certain point in time (block height). Would this tell the auditor to where were the funds were sent? Based ...
18
votes
1answer
862 views
Can I fake a balance by giving the view key to an auditor but omitting some transactions and key images?
The viewkey can be used to see the outputs sent to my address, but not the outputs I generate when sending monero. If I need to know the balance I also need the private spendkey. It is suggested that ...
