Questions tagged [key-image]

Questions about key images including how they are computed and how they are used to prevent the double spending of Monero

Filter by
Sorted by
Tagged with
16
votes
3answers
4k views

What is a key image?

When a transaction is made with monero there is a 'key image' in the transaction info. what is this exactly? is it like the diffie-hellman exchange to create the one time addresses?
19
votes
1answer
964 views

Can I fake a balance by giving the view key to an auditor but omitting some transactions and key images?

The viewkey can be used to see the outputs sent to my address, but not the outputs I generate when sending monero. If I need to know the balance I also need the private spendkey. It is suggested that ...
9
votes
3answers
3k views

How does the recent patched key image exploit work in practice?

For more info https://getmonero.org/2017/05/17/disclosure-of-a-major-bug-in-cryptonote-based-currencies.html This has been patched months ago and was never exploited which can be proven by running a ...
4
votes
1answer
447 views

What are the “ingredients” of a key image?

This is a scenario I've come up with to help me understand key images. Let's say I have Wallet 1 and Wallet 2. Wallet 1 has TXO A and TXO B. I send TXO A and TXO B as inputs to Wallet 2. TXO B was ...
5
votes
2answers
970 views

Can the import\export key images command can be used to check the balance of a paperwallet?

The import/export key images command can be used to check the balance of a view only wallet. But is there a way to use it to check the balance of an already set up Paperwallet? Is it possible to get ...
8
votes
1answer
560 views

How do key images really work?

I have the following questions regarding the equation I=xHp(P): What is the hash function Hp? How can we know that Hp(P) is a point on the Ed25519 curve? Or is it not? Is the value I published with ...
5
votes
3answers
781 views

Is making a key image public equal to giving the monero in that output away?

So I read about proving your balance to an auditor, and someone suggested that you can share your view key, exposing all outputs that you received on that address. If you then give out all key images ...
5
votes
1answer
272 views

What is the deterministic hash to EC function used to construct the key image?

Ring signatures alone would allow double spending, so Monero (as a result of following the CrpytoNote whitepaper) has to use a 'key image', which is the same across identical transactions and hence ...
2
votes
1answer
95 views

Key Image and Ring Member

When were counting the number of ring signatures for a certain transaction do we count the number of key images or ring members of each key image?
2
votes
1answer
206 views

Is it easily provable by a third party that the key image used in a transaction is associated with the spent output without revealing the (P,I) pair?

What I'm getting at is I'd like to know how the Monero network can know that a key image used in a transaction is not either forged (probably an easy answer) or created from a different output owned ...