Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [range-proofs]

The tag has no usage guidance.

2
votes
1answer
46 views

How does having a negative number in a Pedersen commitment, create money out of thin air?

Given two inputs of value: 10, 11 And two outputs of value 31, -10 The Pedersen commitment would look like: Let b + c - d - e = k (10G + bH + 11G + cH) - (31G + dH + -10G + eH) = 0G + kH Without ...
3
votes
1answer
91 views

What exactly are bulletproofs replacing in monero?

I am stuck on these questions in understanding bulletproofs: Are bulletproofs a way to hide the sender and the amount? What is the difference between bulletproofs, RingCT and Ring signatures? Edit: ...
2
votes
1answer
52 views

Hiding transaction values using pederson commitments and range proofs in accounts model

Conceptually how does one hide transaction values using pederson commitments and range proofs in ethereum(accounts model)? The key issue is how can we make it happen in an accounts model and not in ...
2
votes
1answer
145 views

What is the “SpendProofV1…” or “OutProofV1…” in the details of a sent transaction in the GUI?

I'm guessing it's either the Confidential Transaction range-proof? Or is it some kind of proof-of-payment I can send to the recipient to prove... payment...? Either way, what privacy or security is ...
1
vote
1answer
53 views

Are range proofs output specific?

For example imagine the situation where i have one unspent output valued at 0.5 XMR In another wallet i also have another unspent output valued at 0.5 XMR even thought these outputs share the same ...
7
votes
1answer
371 views

Proving amount of Monero - Range Proofs

As far as i understand Monero currently uses range proofs (Soon to be bulletproofs) to prove that when an amount of Monero is sent that amount is between 0 and some large number. this is to protect ...
4
votes
1answer
154 views

Using Monero as proof of funds

I'm writing an article about the future of Healthcare. I wondered if it was possible to use Monero to make a proof of funds. For example: the hospital wants to know that I can pay for the medical care ...
14
votes
1answer
3k views

What are bulletproofs?

I have heard that Monero transactions are relatively large, and that Bulletproofs will make Monero transactions smaller. Can someone give a high-level overview about what these are, and how they ...
3
votes
1answer
53 views

How will payment metadata be incorporated into the range proof?

According to this comment, which reads: @kenshi84 I now agree with JollyMort's idea that we should not allow integrated subaddresses and should not allow multiple integrated addresses in a multiple ...
5
votes
1answer
94 views

Impact of Range Proof Optimizations on M_O

After beginning at 60kB, the M_0 (minimum penalty-free block size) proved problematic after the v4 fork (introduction of RingCT) led to increased transaction (and block) sizes. Following an initial ...
11
votes
1answer
263 views

How will the range proof size reduction be accomplished?

According to this answer Range proofs are currently 6304 bytes (per output) and will drop in the future by at least 1024 bytes. How will the future 1024 byte reduction per output be accomplished? ...
8
votes
1answer
128 views

Can the size of range proofs be reduced?

Range proofs are currently quite large, roughly 12-30kb. Is it likely that range proofs will become smaller in the future through various optimizations?
9
votes
3answers
405 views

In ringct, how are the range proofs kept separate from the pedersen commitments in a transaction?

Are the range proofs and pedersen commitments part of a transaction? Or are they not kept in a transaction at all?
7
votes
1answer
164 views

How will RingCT dust work?

Right now, if you have a small piece of Monero, you can spend it with mixin 0. That way, you can collect a bunch of them without paying too high of fees. RingCT will hide amounts, meaning it won't be ...
11
votes
2answers
333 views

Can Ring Confidential Transactions Range Proofs be pruned?

RingCT adds a set of range proofs to each transaction. Can these be pruned? Would there be a need for "full nodes" which retain these proofs? If so, why?