All Questions
125 questions
0
votes
1
answer
49
views
Could anyone explain ge_frombytes_vartime for me?
Recently I am working on monero source code, and I wonder how monero verify ed25519 public key is invalid. Is this function converting the public key into Y coordinates, then calculating the X ...
- 1
0
votes
1
answer
369
views
Create a key pair for a Monero wallet through the seed generator from the BIP32/BIP44 standard
I am trying to derive my accounts of different blockchains via BIP44 standard to have deterministic account hierarchy. I was able to generate keys for BTC,ETH and other blockchains, but not for monero ...
- 1
0
votes
0
answers
48
views
How to have list of incoming and outgoing tx given an address?
I have my full monero node and I'm trying to extrapolate from it, all the tx (incoming and outgoing) involving my address. Right now I'm using the monerojs library and scanning the blocks, the data I'...
- 1
0
votes
1
answer
315
views
Quantum-safe stealth addressing
Many of you will know that the stealth addressing system used in Monero is vulnerable to quantum attacks, due to it being based on quantum-weak cryptography. Although not all payments would be ...
- 21
1
vote
1
answer
91
views
Monero public key generation
I'm trying to get the public key with different JavaScript libraries: with elliptic and with libsodium-wrappers-sumo This is my code:
const BN = require('bn.js');
const EdDSA = require('elliptic')....
- 87
5
votes
1
answer
170
views
What is the concept of Refund Transactions from the MRL?
I am searching for more information on the concept of refund transactions.
I found that the MRL is working on a paper on the topic (source).
Would this be something that will be used in channel ...
- 985
1
vote
1
answer
189
views
What makes decoding the total sent amount using the viewkey potentially inaccurate?
When using the 'decode outputs' on moneroexplorer for a TX that I sent, I get this warning when it (correctly) estimates the amount that I spent:
Possible spending is: spent amount (tx fee included)...
- 121
2
votes
1
answer
124
views
ed25519 problem with libsodium implementation S_a + S_b = (s_a+s_b)*G
I'm trying to make my own implementation of atomic swaps by following this article. I use a low level node.js bindings for libsodium for this.
If I understand the protocol correctly, then Alice and ...
- 87
17
votes
2
answers
2k
views
Why/how does monero generate public ed25519 keys without using the standard public key generation provided by ed25519 libraries?
Why/how does monero generate public ed25519 keys without using the standard public key derivation provided by ed25519 libraries?
Inspecting the code for mininero (https://github.com/monero-project/...
- 1,257
2
votes
1
answer
127
views
How does the code for scalar reduction work?
In this piece of code:
https://github.com/monero-project/monero/blob/master/src/crypto/crypto_ops_builder/ref10CommentedCombined/sc_reduce.c#L35
We reduce a scalar by mod l.
what is the ...
- 660
2
votes
1
answer
67
views
Monero secret key (32b) vs libsodium ed25519 secret key (64b)
I'm trying to move cryptographic key operations in the Monero Python module from pure Python to pynacl which is a wrapper around libsodium.
The first problem I stumbled upon is that Monero secret keys ...
- 620
22
votes
2
answers
2k
views
What privacy issues did Monero have and still has?
Has there been any scientific research regarding the promised privacy and security of Monero?
Have there been attacks on the Monero network in the past? If so, what has been done to combat those?
...
- 733
1
vote
1
answer
109
views
Are hex private keys already in little endian format?
I implemented my own private (seed) spend and view key generator for learning purposes but I still don't fully understand. I ended up with a working implementation but I feel that I'm just swapping ...
- 63
19
votes
2
answers
4k
views
Why are Monero addresses so long?
A raw Monero address is 95 characters long compared to 26-34 characters for a Bitcoin address.
Monero integrated address are even longer at 106 characters.
What is the cryptographic reason that ...
- 731
1
vote
1
answer
53
views
Why is the limit in the random32_unbiased function different between the comments and the actual code?
I'm talking about this specific function:
void random32_unbiased(unsigned char *bytes)
{
// l = 2^252 + 27742317777372353535851937790883648493.
// l fits 15 times in 32 bytes (iow, 15 l is ...
- 63
9
votes
2
answers
878
views
Is there information available about the Levin protocol?
Is there any information available about the Levin protocol?
It seems to be used for the peer to peer communication.
Things like:
The working of the protocol?
What are the benefits? Why was it ...
- 609
3
votes
2
answers
360
views
Should Monero use ElGamal commitments instead of Pedersen commitments?
Following on from the Q/A
regarding "perfectly hiding and computationally binding" commitments, it is
mentioned ElGamal commitments can be used to flip the commitment properties to
become "perfectly ...
- 19.4k
15
votes
1
answer
2k
views
What is StringCT?
I saw some recent comments about RuffCT/StringCT, which is a supposed improvement to RingCT. What is RuffCT/StringCT, and how is it different than RingCT? What improvements (if any) will this bring to ...
- 8,826
9
votes
3
answers
4k
views
How does the recent patched key image exploit work in practice?
For more info https://getmonero.org/2017/05/17/disclosure-of-a-major-bug-in-cryptonote-based-currencies.html This has been patched months ago and was never exploited which can be proven by running a ...
- 3,215
8
votes
4
answers
841
views
How will the world learn of Monero? [closed]
I do my part in sharing the Monero technology with those I know, of whom I think may be interested.
However, when I was introduced to Monero a few months ago, I found quite a bit of misinformation ...
- 793
3
votes
2
answers
180
views
What is the size of the set of spent key images in Monero?
For research purposes, I want to know the following:
What is the exact size of the set of already spent key images and how it can be checked? Do we need to download the Monero blockchain to get the ...
- 73
16
votes
2
answers
3k
views
What happened at block 202612?
Why was this block hardcoded in the source-code?
What happened with the Monero blockchain in the block 202612?
user20
1
vote
1
answer
92
views
Possible error in book Zero to Monero: Second Edition
I am reading the book Zero to Monero: Second Edition from the GetMonero Library.
On the 3rd paragraph of page 15, the book mentions an algorithm for finding points inside the subgroup of order l, ...
- 13
6
votes
2
answers
7k
views
How to know when I get paid from mining Monero
I just started to mining Monero, using Claymore v3.8. Via CPU.
With my very weak knowledge of mining, I just want to see a "payment" so can be sure that I am not mining for nothing.
I am using ...
- 161
10
votes
4
answers
995
views
Is a Monero key backdoor possible?
Recently an article was published stating the possibility of the NSA or some other malicious organization creating backdoor undetectable Diffie-Hellman keys (source) to allow snooping.
Is Monero at ...
- 430
5
votes
1
answer
228
views
What is Triptych and how does it relate to Monero ring signatures?
Monero Research Lab recently published a research paper on Triptych: https://eprint.iacr.org/2020/018
What is Triptych, and what are its advantages and disadvantages compared to CLSAGs?
- 8,826
11
votes
3
answers
164
views
Hashrate correlation by time of day
Looking at historical Monero hash rate data it appears as if the hashrate is often the highest near 0:00 GMT and lowest near 12:00 GMT
What credible explanations are there for this pattern? What ...
- 385
10
votes
3
answers
766
views
In ringct, how are the range proofs kept separate from the pedersen commitments in a transaction?
Are the range proofs and pedersen commitments part of a transaction? Or are they not kept in a transaction at all?
- 3,215
4
votes
2
answers
484
views
What is the impact of having perfectly hidden but only computationally bound commitments?
Monero uses Pedersen commitments to make transaction amounts private (hidden), but what, if any, are the problems of perfectly hidden and computationally binding commitments?
- 19.4k
4
votes
5
answers
403
views
Monero technology information [closed]
While this SE site is a good source for getting specific questions answered, where can I go to gain good background knowledge and learn technical details about Monero?
- 83
3
votes
1
answer
3k
views
How does Ring Confidential Transactions work?
Can someone explain to me how RingCT works and how the recipient gets the actual amount from the encrypted amount in a RingCT transaction?
7
votes
3
answers
2k
views
Can a One-Time public key be used for more than one payment?
If I understand correctly, every new payment will ideally have a different one-time public key for increased privacy. However, could a one-time public key receive Monero more than once (as in ...
- 181
13
votes
2
answers
1k
views
Can you trustlessly trade Monero for Bitcoin?
Some cryptocurrencies can be traded in a trustless manner, also known as atomic cross-chain traded. This means that when the trade is done, either the entire trade is done, or none of it is (otherwise,...
- 3,120
1
vote
1
answer
64
views
How to compute ringct multisignature key images? (Disambiguation of MRL005)
I'm looking at the multisignature scheme provided by MRL005 Section 4.4, and some things are unclear to me. I've attached a picture below of the expression for which I'm seeking some clarification.
...
- 13
14
votes
2
answers
347
views
How does ringct interact with multisig?
When the ringct branch is finished, will it make m-of-n multisig easier or harder to implement?
- 1,386
1
vote
1
answer
296
views
What is "Janus"-linking?
How did it get its name?
The attacker can't actually steal Monero, right?
It relates to a clever use of cryptography involved in subaddresses? How so?
Can it be mitigated?
- 5,515
6
votes
1
answer
2k
views
What cryptography primitives/concepts, other than the basic ones, does Monero use?
The following are the "basic" cryptography primitives/concepts, taught in all beginner textbooks on cryptography:
symmetric encryption (stream and block ciphers. AES, etc.)
asymmetric public-key ...
- 63
11
votes
1
answer
2k
views
What are Borromean signatures?
For more background info visit GitHub or Bitcointalk
It looks like borromean signatures are going to be replacing schnorr signatures in the RingCT hardfork. What does this mean for Monero and RingCT ...
- 3,215
13
votes
2
answers
325
views
What will the Monero Research Lab be working on in the future, after RingCT has released?
Will they be looking more into quantum proofing the Monero protocol or Cuckoo Cycle testing etc?
- 1,155
9
votes
1
answer
628
views
Are Confidential Transactions in Monero perfectly binding or hiding?
Bitcoin contributor Pieter Wuille recently commented on Reddit:
Bulletproofs and the Pedersen commitments they operate on are
perfectly hiding, but not perfectly binding. This roughly means that
...
- 215
6
votes
2
answers
1k
views
How do I manually decode outputs?
I'm currently coding a small Monero tool just to better understand how it all works. I already implemented address-generation from scratch (thanks to luigis address test page) and the next step is to ...
4
votes
2
answers
567
views
Understanding MLSAG in Monero transaction
This is a followup question to Understanding the structure of Monero transaction with emphasis on the MLSAG part.
Here's the transaction's structure again given with print_tx ...
- 177
10
votes
1
answer
1k
views
Can someone walk me through a simple example to explain how RingCT works?
Original:
https://www.reddit.com/r/Monero/comments/5irg81/questions_regarding_the_cryptography_behind_ringct/
I just read the RingCT paper, and there are a couple things that could use some clearing ...
- 2,485
8
votes
2
answers
223
views
Can Monero's privacy features be integrated into (copied) by bitcoin?
Can Monero's privacy features be integrated into (copied) by bitcoin? If so, to what degree given the current political gridlock?
By the way, I'm a true believer and I'm setting up a full node as I ...
- 147
1
vote
0
answers
27
views
Leveraging FHE transpiler in Monero
Google released recently FOSS source code for a "Fully Homomorphic Encryption Transpiler". Here is the associated paper.
How can this be leveraged for Monero ?
For example, can this be used ...
- 2,968
7
votes
2
answers
458
views
When you sign a Monero transaction, are you signing a hash?
When you are signing a Monero transaction, do you sign the transaction itself, or do you hash the transaction and then sign that?
- 3,120
2
votes
3
answers
2k
views
How can I verify the SHA256 hash of 0.10.3 “Wolfram Warptangent” on Windows?
How can I verify the SHA256 hash published for the official 0.10.3 release matches the file that I downloaded for Windows, 64-bit?
- 438
7
votes
1
answer
662
views
Stealth addresses: where do they come from?
I wonder what the origin of stealth addresses is.
I learned that they were introduced for BitCoin, by Peter Todd. However, I cannot find any literature describing or analysing the specific ...
- 307
5
votes
2
answers
407
views
How strong is Monero cryptography against brute-force attacks?
I have seen an image about brute forcing Bitcoin cryptography saying even a perfect computer which uses all the power of star system, and still wont succeed.
How strong is Monero cryptography ...
- 722
2
votes
1
answer
421
views
Explanation of how exactly the pederson commitments in monero work?
so lets say for the first commitment (after a mined transaction)
let a = miner_reward
this is a known number.
to generate the first commitment, one does;
input = x.G + a.H; output = x.G + a.H
...
- 201