Questions tagged [key-image]

Questions about key images including how they are computed and how they are used to prevent the double spending of Monero

Filter by
Sorted by
Tagged with
18
votes
1answer
898 views

Can I fake a balance by giving the view key to an auditor but omitting some transactions and key images?

The viewkey can be used to see the outputs sent to my address, but not the outputs I generate when sending monero. If I need to know the balance I also need the private spendkey. It is suggested that ...
16
votes
3answers
3k views

What is a key image?

When a transaction is made with monero there is a 'key image' in the transaction info. what is this exactly? is it like the diffie-hellman exchange to create the one time addresses?
10
votes
1answer
158 views

Is it safe to share my key images with other people?

Let's say I run a charity that wants to show people how much money comes in and out of my Monero wallet. If I export the key images, is it safe to publish them on my website, or does doing so open up ...
9
votes
3answers
3k views

How does the recent patched key image exploit work in practice?

For more info https://getmonero.org/2017/05/17/disclosure-of-a-major-bug-in-cryptonote-based-currencies.html This has been patched months ago and was never exploited which can be proven by running a ...
8
votes
1answer
504 views

How do key images really work?

I have the following questions regarding the equation I=xHp(P): What is the hash function Hp? How can we know that Hp(P) is a point on the Ed25519 curve? Or is it not? Is the value I published with ...
7
votes
3answers
199 views

Does publishing view key and key images give the auditor the information on where I sent the funds?

I see here that it's possible to provide information to an auditor to prove the balance at a certain point in time (block height). Would this tell the auditor to where were the funds were sent? Based ...
6
votes
1answer
424 views

What signature prevents me from spending others' coins?

In passive mixing, the monero wallet finds n other parties and forms a ring signature that proves the signer is one of the parties in the ring, and hence entitled to spend from one of the accounts ...
5
votes
3answers
763 views

Is making a key image public equal to giving the monero in that output away?

So I read about proving your balance to an auditor, and someone suggested that you can share your view key, exposing all outputs that you received on that address. If you then give out all key images ...
5
votes
2answers
938 views

Can the import\export key images command can be used to check the balance of a paperwallet?

The import/export key images command can be used to check the balance of a view only wallet. But is there a way to use it to check the balance of an already set up Paperwallet? Is it possible to get ...
5
votes
1answer
253 views

What is the deterministic hash to EC function used to construct the key image?

Ring signatures alone would allow double spending, so Monero (as a result of following the CrpytoNote whitepaper) has to use a 'key image', which is the same across identical transactions and hence ...
4
votes
2answers
201 views

Key-image generation: What does p signify in I = xHp(P)?

According to the CN whitepaper key image I is generated thusly: I = xHp(P) I understand P is the one-time public key for the transaction, x the corresponding private key and H a deterministic hash ...
4
votes
2answers
280 views

Understanding MLSAG in Monero transaction

This is a followup question to Understanding the structure of Monero transaction with emphasis on the MLSAG part. Here's the transaction's structure again given with print_tx ...
4
votes
1answer
159 views

Can an output be used as a decoy after it has been spent?

The title of the question is probably specific enough, but I'll give more color anyway. Here's a quick timeline. I received output A a year ago. In the last year, output A has been a decoy in 3 ...
4
votes
1answer
437 views

What are the “ingredients” of a key image?

This is a scenario I've come up with to help me understand key images. Let's say I have Wallet 1 and Wallet 2. Wallet 1 has TXO A and TXO B. I send TXO A and TXO B as inputs to Wallet 2. TXO B was ...
3
votes
1answer
101 views

Detecting the real output in ring signature

I have a strange question about the relation of P_i (stealth addresses in ring signature) with x (the one-time private key). Suppose Alice wants to spend P_1 with her spend private key (x) and we ...
3
votes
1answer
87 views

bad balanced CURRENCY_BLOCK_GRANTED_FULL_REWARD_ZONE constant

I have seen several Boolberry users report a wallet and daemon error similar to this one: Wallet: Error: transaction was rejected by daemon with status "Failed" Daemon: Transaction with id= ...
3
votes
2answers
119 views

How can I check if a key image has been imported into a view wallet?

How can I check if a key image has been successfully imported into a view wallet, particularly a cold wallet that has never spent any of the funds it has received?
2
votes
1answer
201 views

Is it easily provable by a third party that the key image used in a transaction is associated with the spent output without revealing the (P,I) pair?

What I'm getting at is I'd like to know how the Monero network can know that a key image used in a transaction is not either forged (probably an easy answer) or created from a different output owned ...
2
votes
1answer
81 views

Key Image and Ring Member

When were counting the number of ring signatures for a certain transaction do we count the number of key images or ring members of each key image?
1
vote
1answer
44 views

Does the Key Image leak privacy information?

If I Sign two different transactions with the same private key and send it to the same node. Would this node now be able to know which member of the ring is trying to sign? As I believe the public ...
1
vote
1answer
122 views

Trezor firmware, private view key, key image and privacy

It is my understanding that the Monero trezor firmware uses the private view key. This might lead to some privacy concerns. I have read that key image can be used to check balance of a paperwallet. ...
1
vote
2answers
41 views

How is the number of key images for a transaction selected?

I see that there are a few transactions that have many key images for each of the 11 ring members. But there are also a few with a lesser number of key images. How does this happen?
1
vote
1answer
40 views

Sent some monero with the cli using the transfer command. How can I get the key to view proof that I sent it using an monero explorer?

I did a transfer using the cli and now I want to view it in the https://xmrchain.net explorer. What do I need from me to decode the outputs so I can prove that I sent it? And what commands do I need ...
1
vote
1answer
114 views

The entire lifecycle of an XMR transaction with RingCT

I'm trying to understand the data structure in monerod and create a simple workflow for a transaction's life cycle. It doesn't look like this has been done post-RingCT activation, and I see a lot of ...
1
vote
2answers
68 views

Can monero include actual spent input as previous transaction output?

Let's take we have two transactions. In the first transaction, it has 1 input with zero mixins and 3 outputs(stealth addresses). The second transaction has 1 input with one mixins and 2 outputs. Here ...
1
vote
1answer
72 views

How does key images work when you create a transaction using two or more of your previously unspent transaction outputs?

I've read key images are the critical element in Monero to avoid double spends. I think I understand how it works when you are using only one of your previously unspent transaction outputs to create ...
1
vote
1answer
128 views

What keys are being used to create the key image and how is it verified?

So i'm trying to pin this down since yesterday and i simply cannot find a definite answer. Read dozens of posts and few papers specifically on this topic and while i developed a "belief" that it has ...
0
votes
1answer
79 views

wallet cli v0.12 : “ Error : Failed to import Key images”

I've already created some view only wallet using --generate-from-view-key and importing key images, but today i've an issue doing this last step with Wallet cli v0.12. I've the following message when ...