All Questions
125 questions
5
votes
1
answer
154
views
Can you make contingent payments in Monero?
Bitcoin allows one to make contingent payments, where the transaction only goes through if the receiver reveals some piece of information. The most basic example of this is P2SH, which is hard coded ...
- 3,120
5
votes
1
answer
241
views
Why does the stealth address involve a hash function?
According to the cryptonote white paper, a stealth address of the form P = H_s(rA)G + B. My question is, why is the hash function necessary? It seems that P=rA + B would work just as well. Using a ...
- 3,120
8
votes
1
answer
99
views
Has RingCT been reviewed by the other Monero Research Lab members?
Shen Noether has created RingCT and I trust that he has done so in a safe and correct manner, but it never hurts to have more eyes on the crypto. RingCT is currently in testnet and being rigorously ...
- 1,155
3
votes
2
answers
314
views
Computing the hash of a string using Monero's codebase
In the process of trying to learn Monero's codebase and attempting to modify it, I have come across this difficulty: after having a user to enter his/her passphrase (a string), I would like to compute ...
- 3,327
4
votes
1
answer
230
views
What alternative cryptography could be used in the future to protect Monero against quantum computers?
I know most cryptography Monero uses relies mostly on EC crypto which would be easily broken by a quantum computer powerful enough. What options does Monero have in the future to protect itself?
- 3,215
4
votes
1
answer
164
views
How do ringct transactions use previous non-ringct outputs in a ring signature with ringct?
How will ringct transactions use non-ringct outputs to use in a ring signature? Is there any trick that gets them to work together with ringct or is it pretty simple and I am missing something?
- 3,215
2
votes
2
answers
132
views
How the sender recover the transactions that he spent?
In order to compute the balance of his own wallet, (I assume that) a client needs to retrieve:
1- The transaction that he is the receiver.(By scanning the whole block-chain and compare with his own ...
- 367
5
votes
1
answer
71
views
(Non-ring) Wallet signatures
I am reading about ECDSA and EdDSA. I was wondering what the Monero void crypto_ops::generate_signature signature is based upon. From the code, I see that the math to generate one is
k = rand()
t3 = ...
- 307
8
votes
1
answer
131
views
MRL RingCT research in the Ledger Journal
I understand that Ledger:
is a peer-reviewed scholarly journal that publishes full-length original research articles on the subjects of cryptocurrency and blockchain technology, as well as any ...
- 2,239
6
votes
1
answer
155
views
Where to find a computation example of the monero traceable ring signature mechanism in a small finite field?
In the following coindesk article, The math behind bitcoin, you can find a beautiful example of the ECDSA keypair generation, signature and signature verification algorithms in use in bitcoin. They ...
- 61
5
votes
1
answer
124
views
Editing Monero Papers
I have been reading some of the papers available on Monero, and they contain a lot of typos and other small errors. It would be great if we could fix and clarify them. Don't get me wrong, I greatly ...
- 3,327
8
votes
1
answer
203
views
Formal Verification of Monero code
This answer mentions a plan to eventually formally verify Monero code. Which approach will be used for that verification process? The cited wikipedia page mentions model checking, deductive ...
- 607
0
votes
1
answer
136
views
How do I multiply 2 public keys?
I want to make DH-like key exchange calculating something like this:
b = H(b0B1B2)
But the problem is multiplication between two ec-points is not defined on ec-curve.
I know monero makes some ...
- 121
4
votes
1
answer
163
views
Research on difficulty algorithm
A new difficulty algorithm is said to be researched in https://getmonero.org/design-goals/, with a new MRL paper underway.
I see nothing new on https://github.com/monero-project/research-lab/ about ...
- 34.9k
5
votes
1
answer
139
views
Monero Research Lab - Talent Acquisition. Whom would/do they want?
The MRL, to my knowledge, is made up of four anonymous/pseudonymous academics, who primarily specialize in mathematics (mathematical sciences and algebraic geometry). Are there other specialties that ...
- 5,515
2
votes
1
answer
220
views
What cryptography does Monero utilize?
Just looking for a brief explanation of what cryptography is used and where/how it is used in Monero. Thanks :)
- 3,215
1
vote
1
answer
108
views
Why does the SHA512 code include numbers ending in ULL?
The sha512-blocs.c file contains five blocks like these:
F(w0 ,0x428a2f98d728ae22ULL)
F(w1 ,0x7137449123ef65cdULL)
F(w2 ,0xb5c0fbcfec4d3b2fULL)
F(w3 ,0xe9b5dba58189dbbcULL)
F(w4 ,...
- 543
5
votes
1
answer
90
views
How is the G constant calculated in the cryptonote protocol?
The cryptonote whitepaper uses a G constant, as a base point, to calculate various operations, but I don't understand where this constant actually comes from. Is it just a random point on an ...
- 1,155
5
votes
0
answers
246
views
Security risk due to bad random number generator when creating transactions
I've noticed such risk mentioned in this answer to another question, where a presentation (page 28) by Nicolas T. Courtois, studying Monero cryptography, was referred to.
I'm interested to better ...
- 20k
5
votes
1
answer
68
views
Literature suggestions to understand the cryptography used in Monero?
For a computer scientist familiar with theoretical aspects of the field and a solid understanding of mathematical foundations, but no background in cryptography, what are recommended books or papers ...
- 1,205
2
votes
0
answers
106
views
BLS Signature Aggregation
Would signature aggregation as an alternative to pruning be possible / desirable with Monero?
As far as I understand it, it's a way to compress hundreds of tx into a single hash.
- 121
2
votes
0
answers
81
views
Cryptonote one time use view key
Would be possible to have a one-time view key where it would expire after one use or a specific time has been reached? We assume that this is using the blockchain thus it cannot be modified. What I ...
- 1,026
2
votes
1
answer
60
views
How can I verify the SHA256 hash of 0.10.3 “Wolfram Warptangent” on FreeBSD?
How can I verify the SHA256 listed in this GPG-signed message for the official Monero 0.10.3 release matches the file that I downloaded for FreeBSD, 64-bit?
- 438
2
votes
0
answers
72
views
Determining the real transaction/balance with view key only
An open source web lightwallet was posted on Reddit the source is https://github.com/moneroexamples/openmonero. It would be able to check the balance of your wallet with only the address and view key (...
- 1,026
1
vote
0
answers
30
views
How is the address constructed? [duplicate]
How is the address generated? I know it contains the public view key and the public spend key.
- 3,120