Questions tagged [ringct]

New protocol designed by the Monero Research Labs combining ring signatures from CryptoNote with Confidential transactions. RingCT transactions are not only untraceable (ring signature) but also keep the transaction amount private (confidential transaction).

Filter by
Sorted by
Tagged with
19
votes
1answer
3k views

ELI5: How does RingCT work?

Can someone explain simply how RingCT can make sure that a user has the specified amounts without seeing it? My mind starts to pause as soon as i see formulas on a whitepaper.
15
votes
1answer
971 views

Can I manually check consistency of Pedersen Commitments in RingCT?

Even though I fully trust the math behind RingCT and I know no moneroj can be created out of thin air, sometimes I'd like to see for myself the consistency of the Pedersen Commitment before/after any ...
11
votes
2answers
499 views

How will the ring CT fork be rolled out?

I understand that the latest monero software already has all the RCT code. Does it mean that no upgrade will be required prior to RCT HF? If so, is the block height at which RCT will be allowed ...
10
votes
1answer
1k views

What are Borromean signatures?

For more background info visit GitHub or Bitcointalk It looks like borromean signatures are going to be replacing schnorr signatures in the RingCT hardfork. What does this mean for Monero and RingCT ...
10
votes
3answers
504 views

In ringct, how are the range proofs kept separate from the pedersen commitments in a transaction?

Are the range proofs and pedersen commitments part of a transaction? Or are they not kept in a transaction at all?
6
votes
1answer
548 views

Will there be a January hard-fork for RingCT?

If there is a earlier hard-fork. Will only the RingCT code be included in the version or every improvement until then? Will this skip the March hard-fork or will the March fork use version 5?
10
votes
1answer
525 views

Can someone walk me through a simple example to explain how RingCT works?

Original: https://www.reddit.com/r/Monero/comments/5irg81/questions_regarding_the_cryptography_behind_ringct/ I just read the RingCT paper, and there are a couple things that could use some clearing ...
6
votes
1answer
173 views

How will the transition to RingCT work?

When Monero implements RingCT, how will the transition be handled? In particular, how will pre RingCT outputs be migrated into outputs available for use in RingCT transactions?
5
votes
3answers
449 views

How does RingCT work with / without coefficients?

I was trying to get more information on how RingCT works, I found the thread I linked to below here on the stack exchange. In the other thread, the most upvoted answer explains it as a coefficient, ...
11
votes
1answer
270 views

How will the range proof size reduction be accomplished?

According to this answer Range proofs are currently 6304 bytes (per output) and will drop in the future by at least 1024 bytes. How will the future 1024 byte reduction per output be accomplished? ...
59
votes
3answers
8k views

How does Monero privacy and security compare to Zcash?

How does Monero privacy compare to Zcash? What are the key security risks associated with each design? Since important Monero improvements are in active development and Zcash has yet to launch, ...
20
votes
1answer
2k views

What is RingCT and how does it compare to Confidential Transactions?

What is RingCT and how does the addition of Ring Signatures enhance the privacy properties of RingCT compared to Confidential Transactions as designed by Greg Maxwell? https://people.xiph.org/~greg/...
16
votes
3answers
6k views

How many transactions per second can the Monero network handle?

How many transactions per second can the Monero network (theoretically) handle? Did recent LMDB optimizations improve the speed that CPUs can confirm transactions? Is the current limiting factor CPU ...
11
votes
1answer
798 views

What are 3 types of Ring CT transactions?

In monero, there are three types of RingCT transactions: enum { RCTTypeNull = 0, RCTTypeFull = 1, RCTTypeSimple = 2, }; They can be observed in https://xmrchain.net/ But it's not clear what ...
9
votes
2answers
2k views

What is RingCT and how does it make Monero private?

I hear that RingCT will make Monero more private than Bitcoin. Is there truth to this?
17
votes
2answers
286 views

Spam attack to gain control of many outputs and undermine privacy

Would it be possible for an attacker to send many transactions to himself with the goal of gaining control of many outputs for the purposes of deanonymizing transactions of others (using low mixins ...
10
votes
1answer
205 views

How to see that the RingCT commitment parameter H is in fact a multiple of the base point G

On the last paragraph of page 7 of Monero Research Lab's paper about RingCT, the author makes some statements to the effect that it is possible to pick a random point on the base curve ED25519 that is ...
6
votes
1answer
298 views

Has bandwidth usage or data transferred when mining or hosting a full node increased since the introduction of RingCT?

I've recently started hosting a handful of nodes on my home internet connection and mining to a pool from these machines, it seems as though my internet connection has become a lot slower and a lot of ...
4
votes
1answer
78 views

How is the number of ring members selected?

How is the number of ring members signing a transaction selected? Is it selected randomly by the sender or is it defined by the Monero wallet?
0
votes
1answer
107 views

Error: not enough outputs for specified ring size = 11

I am trying to fork monero release-v0.13. I have made changes to the cryptonote_config file and I built and ran the daemon. Everything seems to be fine, nodes are syncing, mining is happening. But ...
16
votes
1answer
3k views

What are bulletproofs?

I have heard that Monero transactions are relatively large, and that Bulletproofs will make Monero transactions smaller. Can someone give a high-level overview about what these are, and how they ...
28
votes
4answers
2k views

How much larger are Monero transactions compared to the average Bitcoin transaction?

We know that because of the way Monero's privacy works, transactions are larger than a Bitcoin one, but how much larger on average are they compared to Bitcoin transactions? How will this affect the ...
14
votes
3answers
374 views

How will transaction fees be calculated after RingCT?

I read that RingCT will bring transaction sizes close to about 13kb. How much larger would a mixin=4 Monero transaction be compared to a Bitcoin transaction? Based on a 13kb size, it would be about ...
12
votes
1answer
231 views

How much larger would a mixin=4 Monero transaction be compared to a Bitcoin transaction?

I've heard estimates ranging from 5-10 times bigger, but is it possible to come up with a more precise answer? By how much will this figure change after RingCT is implemented? What other factors might ...
11
votes
2answers
370 views

Can Ring Confidential Transactions Range Proofs be pruned?

RingCT adds a set of range proofs to each transaction. Can these be pruned? Would there be a need for "full nodes" which retain these proofs? If so, why?
4
votes
2answers
184 views

Is the 'pseudoOuts' of 'rctSig' the commitment on input amounts for simple RCT

It seems that the genRctSimple function will make a different input commitment for each input amount (line 675-683 in file src/rct/rctSigs.cpp). And summation of these input commitments = output ...
4
votes
2answers
161 views

What is the impact of having perfectly hidden but only computationally bound commitments?

Monero uses Pedersen commitments to make transaction amounts private (hidden), but what, if any, are the problems of perfectly hidden and computationally binding commitments?
14
votes
2answers
301 views

How does ringct interact with multisig?

When the ringct branch is finished, will it make m-of-n multisig easier or harder to implement?
8
votes
1answer
133 views

Can the size of range proofs be reduced?

Range proofs are currently quite large, roughly 12-30kb. Is it likely that range proofs will become smaller in the future through various optimizations?
8
votes
1answer
280 views

Are RingCT signatures malleable?

Can a RingCT signature of a transaction be slightly modified to create an equivalent transaction (same inputs, same outputs) with a different transaction id?
8
votes
1answer
172 views

How can I assist in testing RingCT on the Monero testnet?

I hear that RingCT is currently fully deployed on the Monero testnet, and that we can assist with stress testing the protocol by creating a testnet account ourselves. I created my own testnet wallet ...
8
votes
1answer
342 views

Does the key vector approach in RingCT represent linkability among transactions? Can it be exploited by blockchain analysis?

As I understand from MRL-0005 (Definition 4.1 in page 9), when creating a RingCT transaction with, say, m inputs, n outputs, and q mixin, the i-th member (where i=0...q) of the ring signature R is ...
5
votes
1answer
155 views

How does RingCT increase in transaction sizes affect people?

With the recent hardfork of RingCT there has been talk about the transaction sizes increasing to 25kb on average which is a lot more than before. My question is how does that affect people? Does it ...
5
votes
1answer
196 views

Wolfram Warptangent, Point Release 10.2.1 performance improvements

There have been multiple reports of massive reductions in memory and CPU usage with the new Monero 10.2.1 point release. What specific optimizations led to the "massive speed improvements to RingCT ...
5
votes
1answer
86 views

How was the generator H for the RingCT scheme chosen?

I'm reading the RingCT whitepaper by Shen Noether. The scheme requires a second random generator H such that its discrete logarithm w.r.t. G is not known. Paragraph 3.2 suggests two variants to ...
4
votes
1answer
61 views

What is the reason why the monero firmware is delayed until ringCT is implemented?

What is the reason why the monero firmware is delayed until ringCT is implemented? Does this mean the firmware has to be re-written to work with ringCT? Also will the trezor Monero firmware will be ...
4
votes
1answer
134 views

How do ringct transactions use previous non-ringct outputs in a ring signature with ringct?

How will ringct transactions use non-ringct outputs to use in a ring signature? Is there any trick that gets them to work together with ringct or is it pretty simple and I am missing something?
2
votes
1answer
83 views

How does having a negative number in a Pedersen commitment, create money out of thin air?

Given two inputs of value: 10, 11 And two outputs of value 31, -10 The Pedersen commitment would look like: Let b + c - d - e = k (10G + bH + 11G + cH) - (31G + dH + -10G + eH) = 0G + kH Without ...
1
vote
3answers
71 views

What would the space saving difference be if MLSAG was applied over all inputs?

Currently, MLSAG is being applied to each real input, giving one signature per real input. What would the space savings be if it was applied over all real inputs, giving one signature per transaction? ...