All Questions
125 questions
10
votes
4
answers
995
views
Is a Monero key backdoor possible?
Recently an article was published stating the possibility of the NSA or some other malicious organization creating backdoor undetectable Diffie-Hellman keys (source) to allow snooping.
Is Monero at ...
5
votes
2
answers
407
views
How strong is Monero cryptography against brute-force attacks?
I have seen an image about brute forcing Bitcoin cryptography saying even a perfect computer which uses all the power of star system, and still wont succeed.
How strong is Monero cryptography ...
9
votes
1
answer
2k
views
How do payment ids work?
In particular, how do the encrypted ones work cryptographically.
I'm guessing they are based on the shared secret.
8
votes
1
answer
99
views
Has RingCT been reviewed by the other Monero Research Lab members?
Shen Noether has created RingCT and I trust that he has done so in a safe and correct manner, but it never hurts to have more eyes on the crypto. RingCT is currently in testnet and being rigorously ...
5
votes
1
answer
90
views
How is the G constant calculated in the cryptonote protocol?
The cryptonote whitepaper uses a G constant, as a base point, to calculate various operations, but I don't understand where this constant actually comes from. Is it just a random point on an ...
13
votes
2
answers
325
views
What will the Monero Research Lab be working on in the future, after RingCT has released?
Will they be looking more into quantum proofing the Monero protocol or Cuckoo Cycle testing etc?
7
votes
2
answers
458
views
When you sign a Monero transaction, are you signing a hash?
When you are signing a Monero transaction, do you sign the transaction itself, or do you hash the transaction and then sign that?
6
votes
1
answer
155
views
Where to find a computation example of the monero traceable ring signature mechanism in a small finite field?
In the following coindesk article, The math behind bitcoin, you can find a beautiful example of the ECDSA keypair generation, signature and signature verification algorithms in use in bitcoin. They ...
5
votes
1
answer
241
views
Why does the stealth address involve a hash function?
According to the cryptonote white paper, a stealth address of the form P = H_s(rA)G + B. My question is, why is the hash function necessary? It seems that P=rA + B would work just as well. Using a ...
22
votes
2
answers
2k
views
What privacy issues did Monero have and still has?
Has there been any scientific research regarding the promised privacy and security of Monero?
Have there been attacks on the Monero network in the past? If so, what has been done to combat those?
...
8
votes
4
answers
841
views
How will the world learn of Monero? [closed]
I do my part in sharing the Monero technology with those I know, of whom I think may be interested.
However, when I was introduced to Monero a few months ago, I found quite a bit of misinformation ...
8
votes
1
answer
203
views
Formal Verification of Monero code
This answer mentions a plan to eventually formally verify Monero code. Which approach will be used for that verification process? The cited wikipedia page mentions model checking, deductive ...
6
votes
1
answer
2k
views
Is it possible to trace an output in the Monero blockchain?
In MRL-0004, it's said:
Bob wishes to send 0.75 XMR to Alice, and will pay 0.01 XMR in fees. The Monero
that Alice receives, 0.75 XMR, will be delivered as two new unspent transaction
outputs ...
8
votes
1
answer
403
views
Should I worry about dust in my wallet?
MRL-0004 talks about how if I get sent a weird amount of XMR like 103.32111111, I'll have a weird output of .00111111 in my wallet, and assuming there will be no other outputs of the same amount in ...
9
votes
1
answer
609
views
Aeon minimum mixin
Aeon does not have a mandatory minimum mixin like Monero does. Despite the feature being relatively easy to add, there is no mention of doing so in the current development roadmap.
What advantages ...
13
votes
1
answer
409
views
How did Monero Research Lab members learn about Monero?
Did the original Monero core team reach out to cryptographers in order to seek review of the original CryptoNote whitepaper? Or did the mathematicians hear about CryptoNote from some other means and ...
5
votes
1
answer
154
views
Can you make contingent payments in Monero?
Bitcoin allows one to make contingent payments, where the transaction only goes through if the receiver reveals some piece of information. The most basic example of this is P2SH, which is hard coded ...
13
votes
2
answers
1k
views
Can you trustlessly trade Monero for Bitcoin?
Some cryptocurrencies can be traded in a trustless manner, also known as atomic cross-chain traded. This means that when the trade is done, either the entire trade is done, or none of it is (otherwise,...
1
vote
0
answers
30
views
How is the address constructed? [duplicate]
How is the address generated? I know it contains the public view key and the public spend key.
4
votes
1
answer
163
views
Research on difficulty algorithm
A new difficulty algorithm is said to be researched in https://getmonero.org/design-goals/, with a new MRL paper underway.
I see nothing new on https://github.com/monero-project/research-lab/ about ...
9
votes
1
answer
389
views
What cryptographic assumptions is Monero based on?
Most crypto systems security are based on assumptions that certain problems are difficult, or some mathematical conjecture is true. The only counterexamples I can think of are the one time pad and ...
16
votes
2
answers
3k
views
What happened at block 202612?
Why was this block hardcoded in the source-code?
What happened with the Monero blockchain in the block 202612?
11
votes
3
answers
164
views
Hashrate correlation by time of day
Looking at historical Monero hash rate data it appears as if the hashrate is often the highest near 0:00 GMT and lowest near 12:00 GMT
What credible explanations are there for this pattern? What ...
19
votes
2
answers
4k
views
Why are Monero addresses so long?
A raw Monero address is 95 characters long compared to 26-34 characters for a Bitcoin address.
Monero integrated address are even longer at 106 characters.
What is the cryptographic reason that ...
14
votes
2
answers
347
views
How does ringct interact with multisig?
When the ringct branch is finished, will it make m-of-n multisig easier or harder to implement?