Questions tagged [range-proofs]
The range-proofs tag has no usage guidance.
20 questions
1
vote
0
answers
48
views
Use range proofs to make fees proportional to amounts in transactions
For what I could understand, reading a bit about the use of Bulletproof in Monero, it is used to prove that the amounts in the transaction are between 0 and 2^N-1, where N is the number of bits, ...
- 113
2
votes
1
answer
89
views
Why are rangeproofs necessary?
Title. This is probably a remarkably stupid question, but I digress. Now, I understand the point of rangeproofs, but I don't understand why they're actually necessary.
So, rangeproofs prevent a ...
1
vote
1
answer
354
views
What prevents double-spending?
Let's say I have three outputs that I own:
1st output with 1 Monero,
2nd output with 1 Monero,
3rd output with 100 Monero.
The logic of range proofs supposes that the amount of input Monero equals to ...
0
votes
1
answer
76
views
Is there a monero wallet that can do a range proof?
The question here Proving amount of Monero - Range Proofs
Talks about how to do a range proof, but it doesn't quite say how to do it using existing methods of making a payment. I want to prove a ...
- 1
3
votes
2
answers
94
views
Why does the Bulletproof prover always have T1 = rct::scalarmultKey(T1, INV_EIGHT)?
I am reading the source code of Monero. In the Bulletproof prover, there is always a line like T1 = rct::scalarmultKey(T1, INV_EIGHT). Why is there always a INV_EIGHT multiplication with the point? ...
- 133
3
votes
1
answer
161
views
How does having a negative number in a Pedersen commitment, create money out of thin air?
Given two inputs of value: 10, 11
And two outputs of value 31, -10
The Pedersen commitment would look like:
Let b + c - d - e = k
(10G + bH + 11G + cH) - (31G + dH + -10G + eH) = 0G + kH
Without ...
- 660
3
votes
1
answer
299
views
What exactly are bulletproofs replacing in monero?
I am stuck on these questions in understanding bulletproofs:
Are bulletproofs a way to hide the sender and the amount?
What is the difference between bulletproofs, RingCT and Ring signatures?
Edit: ...
- 660
2
votes
1
answer
181
views
Hiding transaction values using pederson commitments and range proofs in accounts model
Conceptually how does one hide transaction values using pederson commitments and range proofs in ethereum(accounts model)?
The key issue is how can we make it happen in an accounts model and not in ...
- 153
4
votes
1
answer
824
views
What is the "SpendProofV1..." or "OutProofV1..." in the details of a sent transaction in the GUI?
I'm guessing it's either the Confidential Transaction range-proof? Or is it some kind of proof-of-payment I can send to the recipient to prove... payment...?
Either way, what privacy or security is ...
- 143
1
vote
1
answer
72
views
Are range proofs output specific?
For example imagine the situation where i have one unspent output valued at 0.5 XMR
In another wallet i also have another unspent output valued at 0.5 XMR
even thought these outputs share the same ...
- 127
7
votes
1
answer
1k
views
Proving amount of Monero - Range Proofs
As far as i understand Monero currently uses range proofs (Soon to be bulletproofs) to prove that when an amount of Monero is sent that amount is between 0 and some large number. this is to protect ...
- 127
3
votes
1
answer
381
views
Using Monero as proof of funds
I'm writing an article about the future of Healthcare. I wondered if it was possible to use Monero to make a proof of funds. For example: the hospital wants to know that I can pay for the medical care ...
- 242
17
votes
1
answer
4k
views
What are bulletproofs?
I have heard that Monero transactions are relatively large, and that Bulletproofs will make Monero transactions smaller. Can someone give a high-level overview about what these are, and how they ...
- 8,826
3
votes
1
answer
78
views
How will payment metadata be incorporated into the range proof?
According to this comment, which reads:
@kenshi84 I now agree with JollyMort's idea that we should not allow integrated subaddresses and should not allow multiple integrated addresses in a multiple ...
- 8,826
4
votes
1
answer
120
views
Impact of Range Proof Optimizations on M_O
After beginning at 60kB, the M_0 (minimum penalty-free block size) proved problematic after the v4 fork (introduction of RingCT) led to increased transaction (and block) sizes. Following an initial ...
- 6,573
11
votes
1
answer
304
views
How will the range proof size reduction be accomplished?
According to this answer
Range proofs are currently 6304 bytes (per output) and will drop in the future by at least 1024 bytes.
How will the future 1024 byte reduction per output be accomplished?
...
- 2,239
8
votes
1
answer
141
views
Can the size of range proofs be reduced?
Range proofs are currently quite large, roughly 12-30kb. Is it likely that range proofs will become smaller in the future through various optimizations?
- 1,498
10
votes
3
answers
766
views
In ringct, how are the range proofs kept separate from the pedersen commitments in a transaction?
Are the range proofs and pedersen commitments part of a transaction? Or are they not kept in a transaction at all?
- 3,215
6
votes
1
answer
199
views
How will RingCT dust work?
Right now, if you have a small piece of Monero, you can spend it with mixin 0. That way, you can collect a bunch of them without paying too high of fees.
RingCT will hide amounts, meaning it won't be ...
- 3,120
11
votes
2
answers
462
views
Can Ring Confidential Transactions Range Proofs be pruned?
RingCT adds a set of range proofs to each transaction. Can these be pruned? Would there be a need for "full nodes" which retain these proofs? If so, why?
- 1,498