Skip to main content

All Questions

Filter by
Sorted by
Tagged with
10 votes
4 answers
995 views

Is a Monero key backdoor possible?

Recently an article was published stating the possibility of the NSA or some other malicious organization creating backdoor undetectable Diffie-Hellman keys (source) to allow snooping. Is Monero at ...
well_then's user avatar
  • 430
5 votes
2 answers
407 views

How strong is Monero cryptography against brute-force attacks?

I have seen an image about brute forcing Bitcoin cryptography saying even a perfect computer which uses all the power of star system, and still wont succeed. How strong is Monero cryptography ...
MoneroWarrior's user avatar
9 votes
1 answer
2k views

How do payment ids work?

In particular, how do the encrypted ones work cryptographically. I'm guessing they are based on the shared secret.
Christopher King's user avatar
8 votes
1 answer
99 views

Has RingCT been reviewed by the other Monero Research Lab members?

Shen Noether has created RingCT and I trust that he has done so in a safe and correct manner, but it never hurts to have more eyes on the crypto. RingCT is currently in testnet and being rigorously ...
thavu's user avatar
  • 1,155
5 votes
1 answer
90 views

How is the G constant calculated in the cryptonote protocol?

The cryptonote whitepaper uses a G constant, as a base point, to calculate various operations, but I don't understand where this constant actually comes from. Is it just a random point on an ...
thavu's user avatar
  • 1,155
13 votes
2 answers
325 views

What will the Monero Research Lab be working on in the future, after RingCT has released?

Will they be looking more into quantum proofing the Monero protocol or Cuckoo Cycle testing etc?
thavu's user avatar
  • 1,155
7 votes
2 answers
458 views

When you sign a Monero transaction, are you signing a hash?

When you are signing a Monero transaction, do you sign the transaction itself, or do you hash the transaction and then sign that?
Christopher King's user avatar
6 votes
1 answer
155 views

Where to find a computation example of the monero traceable ring signature mechanism in a small finite field?

In the following coindesk article, The math behind bitcoin, you can find a beautiful example of the ECDSA keypair generation, signature and signature verification algorithms in use in bitcoin. They ...
erik's user avatar
  • 61
5 votes
1 answer
241 views

Why does the stealth address involve a hash function?

According to the cryptonote white paper, a stealth address of the form P = H_s(rA)G + B. My question is, why is the hash function necessary? It seems that P=rA + B would work just as well. Using a ...
Christopher King's user avatar
22 votes
2 answers
2k views

What privacy issues did Monero have and still has?

Has there been any scientific research regarding the promised privacy and security of Monero? Have there been attacks on the Monero network in the past? If so, what has been done to combat those? ...
James Cameron's user avatar
8 votes
4 answers
841 views

How will the world learn of Monero? [closed]

I do my part in sharing the Monero technology with those I know, of whom I think may be interested. However, when I was introduced to Monero a few months ago, I found quite a bit of misinformation ...
Cryptocasher's user avatar
8 votes
1 answer
203 views

Formal Verification of Monero code

This answer mentions a plan to eventually formally verify Monero code. Which approach will be used for that verification process? The cited wikipedia page mentions model checking, deductive ...
nicetrader's user avatar
6 votes
1 answer
2k views

Is it possible to trace an output in the Monero blockchain?

In MRL-0004, it's said: Bob wishes to send 0.75 XMR to Alice, and will pay 0.01 XMR in fees. The Monero that Alice receives, 0.75 XMR, will be delivered as two new unspent transaction outputs ...
mwdddgcs's user avatar
  • 195
8 votes
1 answer
403 views

Should I worry about dust in my wallet?

MRL-0004 talks about how if I get sent a weird amount of XMR like 103.32111111, I'll have a weird output of .00111111 in my wallet, and assuming there will be no other outputs of the same amount in ...
mwdddgcs's user avatar
  • 195
9 votes
1 answer
609 views

Aeon minimum mixin

Aeon does not have a mandatory minimum mixin like Monero does. Despite the feature being relatively easy to add, there is no mention of doing so in the current development roadmap. What advantages ...
dontmindme's user avatar
13 votes
1 answer
409 views

How did Monero Research Lab members learn about Monero?

Did the original Monero core team reach out to cryptographers in order to seek review of the original CryptoNote whitepaper? Or did the mathematicians hear about CryptoNote from some other means and ...
opensourceprivacy's user avatar
5 votes
1 answer
154 views

Can you make contingent payments in Monero?

Bitcoin allows one to make contingent payments, where the transaction only goes through if the receiver reveals some piece of information. The most basic example of this is P2SH, which is hard coded ...
Christopher King's user avatar
13 votes
2 answers
1k views

Can you trustlessly trade Monero for Bitcoin?

Some cryptocurrencies can be traded in a trustless manner, also known as atomic cross-chain traded. This means that when the trade is done, either the entire trade is done, or none of it is (otherwise,...
Christopher King's user avatar
1 vote
0 answers
30 views

How is the address constructed? [duplicate]

How is the address generated? I know it contains the public view key and the public spend key.
Christopher King's user avatar
4 votes
1 answer
163 views

Research on difficulty algorithm

A new difficulty algorithm is said to be researched in https://getmonero.org/design-goals/, with a new MRL paper underway. I see nothing new on https://github.com/monero-project/research-lab/ about ...
user36303's user avatar
  • 34.9k
9 votes
1 answer
389 views

What cryptographic assumptions is Monero based on?

Most crypto systems security are based on assumptions that certain problems are difficult, or some mathematical conjecture is true. The only counterexamples I can think of are the one time pad and ...
Christopher King's user avatar
16 votes
2 answers
3k views

What happened at block 202612?

Why was this block hardcoded in the source-code? What happened with the Monero blockchain in the block 202612?
user avatar
11 votes
3 answers
164 views

Hashrate correlation by time of day

Looking at historical Monero hash rate data it appears as if the hashrate is often the highest near 0:00 GMT and lowest near 12:00 GMT What credible explanations are there for this pattern? What ...
Luke Benton's user avatar
19 votes
2 answers
4k views

Why are Monero addresses so long?

A raw Monero address is 95 characters long compared to 26-34 characters for a Bitcoin address. Monero integrated address are even longer at 106 characters. What is the cryptographic reason that ...
K Chan's user avatar
  • 731
14 votes
2 answers
347 views

How does ringct interact with multisig?

When the ringct branch is finished, will it make m-of-n multisig easier or harder to implement?
expez's user avatar
  • 1,386

1 2
3