Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ring-signatures]

A ring signature is a group of cryptographic signatures with at least one real participant, but there is no way to tell which in the group is the real one as they all appear valid, while the key image prevents double spends.

2
votes
2answers
79 views

Can any one please tell me where I can find the latest python implementation of monero RingCT?

Mininero is a python implementation of monero. But the git repository is three years old where the latest link does not have any content. Is there any other python implementation of monero where code ...
0
votes
1answer
44 views

Does /get_transaction return ring signatures or key image?

i am trying to use https://www.getmonero.org/resources/developer-guides/daemon-rpc.html#get_transactions To get the signatures.. But i was wondering if they are the correct data or not?
2
votes
1answer
34 views

Key Image and Ring Member

When were counting the number of ring signatures for a certain transaction do we count the number of key images or ring members of each key image?
0
votes
1answer
49 views

Monero Ring Signature data

Is it possible to get all the data of all the transaction with all its ring signatures using either the monero-wallet or API?
2
votes
1answer
33 views

How does signing the hash of the public key show that the signer knew the private key?

I had this previously explained to me, however I do not think I understand it at all. Taken from Maxwell's confidential values: "If a signature is constructed so that the 'message' is the hash of ...
1
vote
1answer
31 views

What is a scenario when the other members of the ring signature would have multiple keys?

Looking at the algorithm for ring signature, n members of the ring can have m keys associated with them. What is a scenario where the other members, not the signer, would have multiple keys ...
1
vote
1answer
19 views

Why must each input have a separate set of decoys?

If we have a mixin of 6, with two inputs. We immediately have a total of 6 * 2 = 12 decoys Would it not be secure enough to have the 4 decoys with the two inputs which means two key images? So we ...
1
vote
1answer
43 views

How does the ring sig work: practical explanation?

Is the following correct?: If I received 5 XMR from Bob, then I wanted to send this 5 XMR to Alice. Would I create a tx with the input as the 5 XMR from Bob with one output as 5 XMR to alice. Then ...
1
vote
1answer
42 views

How are transactions validated in monero vs bitcoin?

Bitcoin In bitcoin, the signature is a "normal" one and we check it against the signed tx hash. We then check whether the public key/s which signed it, owns the input/s. we then check whether the ...
3
votes
1answer
100 views

What exactly are bulletproofs replacing in monero?

I am stuck on these questions in understanding bulletproofs: Are bulletproofs a way to hide the sender and the amount? What is the difference between bulletproofs, RingCT and Ring signatures? Edit: ...
1
vote
1answer
55 views

How do miners verify the Ring Signature of a transaction?

As from I have understood, a Ring Signature is created manipulating the true one time spend key of the sender with some set of keys that are actually "decoys" (precisely some random old keys taken ...
3
votes
1answer
66 views

How do ring signatures work when there are multiple UTXOs from which you have to collect monero coin?

User A has 3 UTXOs which sum up to 10 XMR. How does the Key Image ensure that all three utxos cannot be double spent?
1
vote
2answers
45 views

Can monero include actual spent input as previous transaction output?

Let's take we have two transactions. In the first transaction, it has 1 input with zero mixins and 3 outputs(stealth addresses). The second transaction has 1 input with one mixins and 2 outputs. Here ...
1
vote
1answer
29 views

Identifying the *real* public keys of ring signatures

Since a ring signature uses |R-1| decoy outputs for a ring of size R, is it possible to retrieve from them the real (which reveals the true wallet) A,B values from those stealth addresses?
-1
votes
1answer
58 views

Could a blackballs list be used maliciously?

I do not see any way to trustlessly generate a blackballs database without running full nodes for malicious fork coins, which I do NOT want to do (and don't even have hardware resources to do). ...
1
vote
1answer
53 views

How does key images work when you create a transaction using two or more of your previously unspent transaction outputs?

I've read key images are the critical element in Monero to avoid double spends. I think I understand how it works when you are using only one of your previously unspent transaction outputs to create ...
1
vote
1answer
99 views

What keys are being used to create the key image and how is it verified?

So i'm trying to pin this down since yesterday and i simply cannot find a definite answer. Read dozens of posts and few papers specifically on this topic and while i developed a "belief" that it has ...
3
votes
1answer
89 views

Detecting the real output in ring signature

I have a strange question about the relation of P_i (stealth addresses in ring signature) with x (the one-time private key). Suppose Alice wants to spend P_1 with her spend private key (x) and we ...
0
votes
1answer
34 views

Does Monero use rfc6979 for signatures?

I came across a post stating that Monero uses the Borromean Ring Signature scheme to hide the amounts. So what signature scheme is used to sign the transactions?
1
vote
1answer
89 views

What does “rings used by outputs spent on Monero on a key reusing chain” mean?

Can you help me parse this sentence from the Shared RingDB page in the Monero GUI? This records rings used by outputs spent on Monero on a key reusing chain, so that the same ring may be reused to ...
4
votes
1answer
122 views
4
votes
1answer
88 views

Is a transaction from Exchange to Wallet to Exchange traceable?

Here is an example: Exchange1 --> Adr1; Adr1 --> Exchange2 Where Adr1 is a one-time subaddress. Now suppose that Exchange1 and 2 are corrupt and cooperate with a government to leak my information. ...
3
votes
1answer
93 views

How can I choose addresses to create a ring signature for a transaction

I am doing a project based on blockchain, and I found that Monero is a good candidate for my project because of its ring signature scheme. The scenario is that I would like to create a transaction ...
5
votes
2answers
212 views

Understanding MLSAG in Monero transaction

This is a followup question to Understanding the structure of Monero transaction with emphasis on the MLSAG part. Here's the transaction's structure again given with print_tx ...
4
votes
1answer
161 views

Using Monero as proof of funds

I'm writing an article about the future of Healthcare. I wondered if it was possible to use Monero to make a proof of funds. For example: the hospital wants to know that I can pay for the medical care ...
4
votes
0answers
74 views

MLSAG adaptation?

I understand that the main reason why the RCTTypeFull scheme is not applied to multi-input transactions is that the true signing keys in the MLSAG algorithm are on the same row, which impacts ...
2
votes
2answers
299 views

Ring signatures and the long view

Imagine the Monero blockchain has been around for decades. It is incredibly massive and the total number of outputs far exceeds the rate of new outputs being created. Can obfuscation acquired by the ...
1
vote
1answer
73 views

Commitments for RCTTypeSimple transactions

Looking at the code, and after reading a post on the subject, it looks as if transactions of type RCTTypeSimple (multi-input, RCT) get new commitments with new blinding factors for the inputs. Doesn'...
4
votes
1answer
126 views

How Ed25519 curve relates to Borromean Ring Signature scheme?

Is it correct to say that Monero private keys are generated using Ed25519 curve and then Borromean Ring Signature scheme is used to sign transactions? In other words, is Ed25519 curve "compatible" ...
3
votes
2answers
476 views

What all information we can gather from a Monero wallet address?

I am pretty new to this crypto currency. My question is that what all information can be found, if we only know a malicious user's Monero wallet address? Can I check this Monero wallet balance? If ...
4
votes
1answer
350 views

Can someone show an actual example of a Monero transaction that uses two distinct private keys?

Could someone show me an actual example of a single transaction formed from two private keys. Say I have 5 XMR in one private key, and 10 XMR in another, so there are two unique private keys. How do ...
2
votes
0answers
56 views

Can ring signatures be aggregated in blocks to save blockchain space?

Monero is using borromean signatures right now but would ring signatures be able to be aggregated like schnorr signatures to help save space?
6
votes
3answers
372 views

How does RingCT work with / without coefficients?

I was trying to get more information on how RingCT works, I found the thread I linked to below here on the stack exchange. In the other thread, the most upvoted answer explains it as a coefficient, ...
8
votes
3answers
2k views

What's the point of ring signatures if stealth addresses hide the actual addresses anyways?

I understand generally how ring signatures work, but I also realize they are sent to and from stealth addresses, and so I'm curious why ring signatures are needed in the first place. Doesn't a sender'...
6
votes
1answer
197 views

Is there anyway to calculate how much privacy is gained by increasing the ring size of a transaction?

The default for wallets right now is 4 but is there a large benefit say using 15 or 20 over 4? Can this be measured? Bigger ring size will help obviously but after a while is it not kind of a waste of ...
8
votes
1answer
426 views

Can someone walk me through a simple example to explain how RingCT works?

Original: https://www.reddit.com/r/Monero/comments/5irg81/questions_regarding_the_cryptography_behind_ringct/ I just read the RingCT paper, and there are a couple things that could use some clearing ...
2
votes
0answers
295 views

Difference between Monero and CoinJoin [closed]

How does Monero provide any additional anonymity for the sender over a CoinJoin transaction? I get that it provides anonymity of the receiver and the amount spent via stealth addresses and RingCT, ...
6
votes
1answer
101 views

Is there a tool that tells me if my transfer has been used by others in a ring signature?

Is there a tool that, given a tx hash and/or a specific output, can search through the blockchain to see if it's been used as input in other transfers? This would preferably not be a web service but ...
4
votes
1answer
131 views

Can an output be used as a decoy after it has been spent?

The title of the question is probably specific enough, but I'll give more color anyway. Here's a quick timeline. I received output A a year ago. In the last year, output A has been a decoy in 3 ...
5
votes
1answer
186 views

How are outputs chosen on the blockchain for ring signatures in a transaction?

Is there any criteria which outputs are chosen for a 'mixin' in a transaction?
5
votes
1answer
123 views

How do ringct transactions use previous non-ringct outputs in a ring signature with ringct?

How will ringct transactions use non-ringct outputs to use in a ring signature? Is there any trick that gets them to work together with ringct or is it pretty simple and I am missing something?
7
votes
1answer
394 views

What signature prevents me from spending others' coins?

In passive mixing, the monero wallet finds n other parties and forms a ring signature that proves the signer is one of the parties in the ring, and hence entitled to spend from one of the accounts ...
1
vote
0answers
24 views

Is it possible to censor a transaction in Monero? [duplicate]

Would it not be impossible to do censor because of how ring signatures work and not knowing what a transaction is for or where it is going? maybe i am missing something. thanks
13
votes
1answer
227 views

If I send two transactions to the same recipient, can they infer the true sender?

I send two transactions to the same recipient. The two sets of mixins used to generate the transactions would each include my public address. Is the recipient then able to reasonably infer that my ...
5
votes
1answer
725 views

Will quantum computer break ring signatures?

I knows quantum computer breaks elliptic curve math but what about ring signature? thanks
3
votes
0answers
69 views

Impact of Topological data analysis on Monero

What is Topological data analysis? Can it be used to study the Monero blockchain and degrade the privacy of transactions as claimed by Gary Le in the interview referenced by this answer?
4
votes
2answers
289 views

Could Monero implement zk-SNARKS in the future?

At the moment ring signatures are more eficient than zk-SNARKS, but as fluffypony already comment, probably any cryptocurrencie in the future will use this technology. Can monero implement zk-SNARKS ...
5
votes
1answer
394 views

What are MLSAGs, and what is their significance for Monero and/or RingCT?

I've seen MLSAG mentioned in a couple places. I believe it has to do with the "signature" part of "ring signature," but I'm otherwise clueless. Can anyone provide more information?
4
votes
1answer
484 views

Blockchain syncing and transactions verification

Recently I updated to version 0.10, but that wasn't an easy process. It took too long to go over my old blockchain and make it compatible with the new client, so I aborted that (iirc there was no ...
3
votes
2answers
78 views

Obfuscating the output as well?

This is just a random idea with no technical backing: with RingCT the input is obfuscated, but everyone still knows that the output destination holds the money. Is there any possibility of also ...