All Questions
125 questions
7
votes
1
answer
662
views
Stealth addresses: where do they come from?
I wonder what the origin of stealth addresses is.
I learned that they were introduced for BitCoin, by Peter Todd. However, I cannot find any literature describing or analysing the specific ...
- 307
2
votes
1
answer
989
views
Help-Sent Monero From Changelly and did not received funds
I am a total Tech NOOB. I set up the Monero GUI wallet yesterday and moved BTC to Changelly to convert to XMR. Changelly shows the transaction record but something went wrong did not get the funds in ...
- 21
9
votes
1
answer
628
views
Are Confidential Transactions in Monero perfectly binding or hiding?
Bitcoin contributor Pieter Wuille recently commented on Reddit:
Bulletproofs and the Pedersen commitments they operate on are
perfectly hiding, but not perfectly binding. This roughly means that
...
- 215
15
votes
1
answer
2k
views
What is StringCT?
I saw some recent comments about RuffCT/StringCT, which is a supposed improvement to RingCT. What is RuffCT/StringCT, and how is it different than RingCT? What improvements (if any) will this bring to ...
- 8,826
6
votes
1
answer
432
views
Is CryptoNight the hash function which plays the role of the "random oracle"?
Is CryptoNight the hash function which plays the role of the "random oracle" in the random oracle model under which certain properties of CryptoNote are mathematically proven in the original paper? Or ...
- 111
2
votes
1
answer
292
views
Scratchpad Initialisation : What is the input to Keccak?
So this is probably a question I should be able to find the answer to easily but I am stumped. In the documentation for cryptonight the part on scratchpad initialization says:
First, the input is ...
- 21
9
votes
1
answer
1k
views
How do key images really work?
I have the following questions regarding the equation I=xHp(P):
What is the hash function Hp?
How can we know that Hp(P) is a point on the Ed25519 curve? Or is it not?
Is the value I published with ...
- 193
6
votes
2
answers
1k
views
How do I manually decode outputs?
I'm currently coding a small Monero tool just to better understand how it all works. I already implemented address-generation from scratch (thanks to luigis address test page) and the next step is to ...
6
votes
1
answer
2k
views
What cryptography primitives/concepts, other than the basic ones, does Monero use?
The following are the "basic" cryptography primitives/concepts, taught in all beginner textbooks on cryptography:
symmetric encryption (stream and block ciphers. AES, etc.)
asymmetric public-key ...
- 63
9
votes
3
answers
4k
views
How does the recent patched key image exploit work in practice?
For more info https://getmonero.org/2017/05/17/disclosure-of-a-major-bug-in-cryptonote-based-currencies.html This has been patched months ago and was never exploited which can be proven by running a ...
- 3,215
7
votes
3
answers
2k
views
Can a One-Time public key be used for more than one payment?
If I understand correctly, every new payment will ideally have a different one-time public key for increased privacy. However, could a one-time public key receive Monero more than once (as in ...
- 181
2
votes
0
answers
81
views
Cryptonote one time use view key
Would be possible to have a one-time view key where it would expire after one use or a specific time has been reached? We assume that this is using the blockchain thus it cannot be modified. What I ...
- 1,026
2
votes
0
answers
72
views
Determining the real transaction/balance with view key only
An open source web lightwallet was posted on Reddit the source is https://github.com/moneroexamples/openmonero. It would be able to check the balance of your wallet with only the address and view key (...
- 1,026
3
votes
1
answer
2k
views
Missing Monero Funds
I made a transaction on ShapeShift. The transaction was successful but I never received my funds in my wallet. I’ve already talked with ShapeShift customer and they said the best thing to do is to ask ...
- 111
4
votes
2
answers
271
views
Key-image generation: What does p signify in I = xHp(P)?
According to the CN whitepaper key image I is generated thusly:
I = xHp(P)
I understand P is the one-time public key for the transaction, x the corresponding private key and H a deterministic hash ...
5
votes
3
answers
557
views
How does RingCT work with / without coefficients?
I was trying to get more information on how RingCT works, I found the thread I linked to below here on the stack exchange. In the other thread, the most upvoted answer explains it as a coefficient, ...
2
votes
1
answer
60
views
How can I verify the SHA256 hash of 0.10.3 “Wolfram Warptangent” on FreeBSD?
How can I verify the SHA256 listed in this GPG-signed message for the official Monero 0.10.3 release matches the file that I downloaded for FreeBSD, 64-bit?
- 438
4
votes
1
answer
196
views
How can I verify the SHA256 hash of 0.10.3 “Wolfram Warptangent” on macOS?
How can I verify the SHA256 hash published for the official 0.10.3 "Wolfram Warptangent” release matches the file that I downloaded for macOS, 64-bit?
- 438
2
votes
3
answers
2k
views
How can I verify the SHA256 hash of 0.10.3 “Wolfram Warptangent” on Windows?
How can I verify the SHA256 hash published for the official 0.10.3 release matches the file that I downloaded for Windows, 64-bit?
- 438
6
votes
3
answers
412
views
How can I verify the SHA256 hash of 0.10.3 "Wolfram Warptangent" on Ubuntu?
How can I verify the SHA256 hash published for the official 0.10.3 release matches the file that I downloaded for Linux, 64-bit?
- 438
5
votes
3
answers
411
views
Monero Applications Development
I'm a software engineer (Mobile/Native) with interest in cryptocurrency.
I would be interested in taking pet projects for monero, but, i've read recently that the jaxx guys halted the monero's ...
- 153
1
vote
1
answer
108
views
Why does the SHA512 code include numbers ending in ULL?
The sha512-blocs.c file contains five blocks like these:
F(w0 ,0x428a2f98d728ae22ULL)
F(w1 ,0x7137449123ef65cdULL)
F(w2 ,0xb5c0fbcfec4d3b2fULL)
F(w3 ,0xe9b5dba58189dbbcULL)
F(w4 ,...
- 543
10
votes
1
answer
1k
views
Can someone walk me through a simple example to explain how RingCT works?
Original:
https://www.reddit.com/r/Monero/comments/5irg81/questions_regarding_the_cryptography_behind_ringct/
I just read the RingCT paper, and there are a couple things that could use some clearing ...
- 2,485
2
votes
0
answers
106
views
BLS Signature Aggregation
Would signature aggregation as an alternative to pruning be possible / desirable with Monero?
As far as I understand it, it's a way to compress hundreds of tx into a single hash.
- 121
8
votes
1
answer
131
views
MRL RingCT research in the Ledger Journal
I understand that Ledger:
is a peer-reviewed scholarly journal that publishes full-length original research articles on the subjects of cryptocurrency and blockchain technology, as well as any ...
- 2,239
4
votes
1
answer
164
views
How do ringct transactions use previous non-ringct outputs in a ring signature with ringct?
How will ringct transactions use non-ringct outputs to use in a ring signature? Is there any trick that gets them to work together with ringct or is it pretty simple and I am missing something?
- 3,215
7
votes
1
answer
533
views
What signature prevents me from spending others' coins?
In passive mixing, the monero wallet finds n other parties and forms a ring signature that proves the signer is one of the parties in the ring, and hence entitled to spend from one of the accounts ...
- 455
8
votes
1
answer
308
views
What was the problem with ASNL forgery?
For background there is https://nickler.ninja/blog/2016/12/17/a-problem-with-ringct/ and this problem had been fixed before this post was made by changing ASNL to borromean signature. For background ...
- 3,215
10
votes
3
answers
766
views
In ringct, how are the range proofs kept separate from the pedersen commitments in a transaction?
Are the range proofs and pedersen commitments part of a transaction? Or are they not kept in a transaction at all?
- 3,215
8
votes
2
answers
223
views
Can Monero's privacy features be integrated into (copied) by bitcoin?
Can Monero's privacy features be integrated into (copied) by bitcoin? If so, to what degree given the current political gridlock?
By the way, I'm a true believer and I'm setting up a full node as I ...
- 147
4
votes
1
answer
493
views
What other benefits does Cuckoo Cycle have over cryptonight, is it quantum computer proof?
I have read Which reasons were discussed for potentially changing the proof-of-work algorithm? but aside from being more asic 'resistant' and faster to verify what other reason should monero change ...
- 3,215
5
votes
2
answers
736
views
Why does Monero use keccak over something like sha-256?
Keccak uses a sponge function which is cool but what benefits does keccak have over sha-256 for cryptography operations in the code? thanks
- 3,215
4
votes
1
answer
1k
views
Will quantum computer break ring signatures?
I knows quantum computer breaks elliptic curve math but what about ring signature? thanks
- 3,215
11
votes
1
answer
2k
views
What are Borromean signatures?
For more background info visit GitHub or Bitcointalk
It looks like borromean signatures are going to be replacing schnorr signatures in the RingCT hardfork. What does this mean for Monero and RingCT ...
- 3,215
4
votes
1
answer
230
views
What alternative cryptography could be used in the future to protect Monero against quantum computers?
I know most cryptography Monero uses relies mostly on EC crypto which would be easily broken by a quantum computer powerful enough. What options does Monero have in the future to protect itself?
- 3,215
5
votes
1
answer
238
views
How were Monero elliptic curve constants chosen?
In the cryptonote paper review, there was a mention about not knowing how the constants were calculated, is there anyway to verify these constants are 'safe' or change them to something 'better'? ...
- 3,215
2
votes
1
answer
220
views
What cryptography does Monero utilize?
Just looking for a brief explanation of what cryptography is used and where/how it is used in Monero. Thanks :)
- 3,215
5
votes
0
answers
246
views
Security risk due to bad random number generator when creating transactions
I've noticed such risk mentioned in this answer to another question, where a presentation (page 28) by Nicolas T. Courtois, studying Monero cryptography, was referred to.
I'm interested to better ...
- 20k
5
votes
1
answer
416
views
What is the deterministic hash to EC function used to construct the key image?
Ring signatures alone would allow double spending, so Monero (as a result of following the CrpytoNote whitepaper) has to use a 'key image', which is the same across identical transactions and hence ...
- 455
5
votes
1
answer
68
views
Literature suggestions to understand the cryptography used in Monero?
For a computer scientist familiar with theoretical aspects of the field and a solid understanding of mathematical foundations, but no background in cryptography, what are recommended books or papers ...
- 1,205
9
votes
2
answers
878
views
Is there information available about the Levin protocol?
Is there any information available about the Levin protocol?
It seems to be used for the peer to peer communication.
Things like:
The working of the protocol?
What are the benefits? Why was it ...
- 609
16
votes
1
answer
1k
views
Can I manually check consistency of Pedersen Commitments in RingCT?
Even though I fully trust the math behind RingCT and I know no moneroj can be created out of thin air, sometimes I'd like to see for myself the consistency of the Pedersen Commitment before/after any ...
- 2,485
5
votes
1
answer
139
views
Monero Research Lab - Talent Acquisition. Whom would/do they want?
The MRL, to my knowledge, is made up of four anonymous/pseudonymous academics, who primarily specialize in mathematics (mathematical sciences and algebraic geometry). Are there other specialties that ...
- 5,515
5
votes
1
answer
730
views
What is elliptic curve cryptography and why is it important to Monero?
What is elliptic curve cryptography and why is it important to Monero?
Please provide both a basic description and an in depth description of the type found on Moneropedia
- 1,010
10
votes
1
answer
310
views
Is there MRL-0007? What topic is it about?
I see from a previous post that MRL-0001~0005 are complete and published while MRL-0006 and MRL-0008 are still ongoing, but I've never heard anything about MRL-0007. Is there such a thing? If so, what ...
- 2,485
3
votes
2
answers
314
views
Computing the hash of a string using Monero's codebase
In the process of trying to learn Monero's codebase and attempting to modify it, I have come across this difficulty: after having a user to enter his/her passphrase (a string), I would like to compute ...
- 3,327
7
votes
1
answer
161
views
Issue with unforgeability proof of ASNL in RingCT paper
In the RingCT paper, proof of theorem 5.1 (The Aggregate Schnorr Non-linkable ring signature is unforgeable under the discrete logarithm assumption), it is assumed by contradiction that there exists ...
- 3,327
5
votes
1
answer
124
views
Editing Monero Papers
I have been reading some of the papers available on Monero, and they contain a lot of typos and other small errors. It would be great if we could fix and clarify them. Don't get me wrong, I greatly ...
- 3,327
17
votes
2
answers
2k
views
Why/how does monero generate public ed25519 keys without using the standard public key generation provided by ed25519 libraries?
Why/how does monero generate public ed25519 keys without using the standard public key derivation provided by ed25519 libraries?
Inspecting the code for mininero (https://github.com/monero-project/...
- 1,257
4
votes
5
answers
403
views
Monero technology information [closed]
While this SE site is a good source for getting specific questions answered, where can I go to gain good background knowledge and learn technical details about Monero?
- 83