Questions tagged [ringct]

New protocol designed by the Monero Research Labs combining ring signatures from CryptoNote with Confidential transactions. RingCT transactions are not only untraceable (ring signature) but also keep the transaction amount private (confidential transaction).

Filter by
Sorted by
Tagged with
59
votes
3answers
8k views

How does Monero privacy and security compare to Zcash?

How does Monero privacy compare to Zcash? What are the key security risks associated with each design? Since important Monero improvements are in active development and Zcash has yet to launch, ...
28
votes
4answers
2k views

How much larger are Monero transactions compared to the average Bitcoin transaction?

We know that because of the way Monero's privacy works, transactions are larger than a Bitcoin one, but how much larger on average are they compared to Bitcoin transactions? How will this affect the ...
20
votes
1answer
345 views

Does Monero offer an equivalent of Check Lock Time Verify transactions?

Does Monero offer an equivalent of Check Lock Time Verify (CLTV) transactions? If not are there any major CryptoNote or RingCT specific obstacles that would prevent such a feature from being added in ...
20
votes
1answer
2k views

What is RingCT and how does it compare to Confidential Transactions?

What is RingCT and how does the addition of Ring Signatures enhance the privacy properties of RingCT compared to Confidential Transactions as designed by Greg Maxwell? https://people.xiph.org/~greg/...
19
votes
1answer
3k views

ELI5: How does RingCT work?

Can someone explain simply how RingCT can make sure that a user has the specified amounts without seeing it? My mind starts to pause as soon as i see formulas on a whitepaper.
17
votes
2answers
280 views

Spam attack to gain control of many outputs and undermine privacy

Would it be possible for an attacker to send many transactions to himself with the goal of gaining control of many outputs for the purposes of deanonymizing transactions of others (using low mixins ...
16
votes
3answers
6k views

How many transactions per second can the Monero network handle?

How many transactions per second can the Monero network (theoretically) handle? Did recent LMDB optimizations improve the speed that CPUs can confirm transactions? Is the current limiting factor CPU ...
16
votes
1answer
3k views

What are bulletproofs?

I have heard that Monero transactions are relatively large, and that Bulletproofs will make Monero transactions smaller. Can someone give a high-level overview about what these are, and how they ...
15
votes
1answer
956 views

Can I manually check consistency of Pedersen Commitments in RingCT?

Even though I fully trust the math behind RingCT and I know no moneroj can be created out of thin air, sometimes I'd like to see for myself the consistency of the Pedersen Commitment before/after any ...
14
votes
1answer
2k views

What is StringCT?

I saw some recent comments about RuffCT/StringCT, which is a supposed improvement to RingCT. What is RuffCT/StringCT, and how is it different than RingCT? What improvements (if any) will this bring to ...
14
votes
3answers
370 views

How will transaction fees be calculated after RingCT?

I read that RingCT will bring transaction sizes close to about 13kb. How much larger would a mixin=4 Monero transaction be compared to a Bitcoin transaction? Based on a 13kb size, it would be about ...
14
votes
2answers
298 views

How does ringct interact with multisig?

When the ringct branch is finished, will it make m-of-n multisig easier or harder to implement?
13
votes
1answer
456 views

Could Monero help me to implement a safe election for a small group of students?

The problem I am in charge of implementing a secure, secret election for a small group of students on my school. I have a list linking valid student IDs to emails, and I want each one of them to vote ...
12
votes
1answer
229 views

How much larger would a mixin=4 Monero transaction be compared to a Bitcoin transaction?

I've heard estimates ranging from 5-10 times bigger, but is it possible to come up with a more precise answer? By how much will this figure change after RingCT is implemented? What other factors might ...
11
votes
2answers
367 views

Can Ring Confidential Transactions Range Proofs be pruned?

RingCT adds a set of range proofs to each transaction. Can these be pruned? Would there be a need for "full nodes" which retain these proofs? If so, why?
11
votes
2answers
494 views

How will the ring CT fork be rolled out?

I understand that the latest monero software already has all the RCT code. Does it mean that no upgrade will be required prior to RCT HF? If so, is the block height at which RCT will be allowed ...
11
votes
1answer
268 views

How will the range proof size reduction be accomplished?

According to this answer Range proofs are currently 6304 bytes (per output) and will drop in the future by at least 1024 bytes. How will the future 1024 byte reduction per output be accomplished? ...
11
votes
1answer
767 views

What are 3 types of Ring CT transactions?

In monero, there are three types of RingCT transactions: enum { RCTTypeNull = 0, RCTTypeFull = 1, RCTTypeSimple = 2, }; They can be observed in https://xmrchain.net/ But it's not clear what ...
10
votes
3answers
478 views

In ringct, how are the range proofs kept separate from the pedersen commitments in a transaction?

Are the range proofs and pedersen commitments part of a transaction? Or are they not kept in a transaction at all?
10
votes
1answer
511 views

Can someone walk me through a simple example to explain how RingCT works?

Original: https://www.reddit.com/r/Monero/comments/5irg81/questions_regarding_the_cryptography_behind_ringct/ I just read the RingCT paper, and there are a couple things that could use some clearing ...
10
votes
1answer
1k views

What are Borromean signatures?

For more background info visit GitHub or Bitcointalk It looks like borromean signatures are going to be replacing schnorr signatures in the RingCT hardfork. What does this mean for Monero and RingCT ...
10
votes
1answer
333 views

Is Monero the first cryptocurrency to use Confidential Transactions (RingCT), 0MQ, and LMDB?

I assume these technologies exist in other usages, but are we the first coin to implement them?
10
votes
1answer
196 views

How to see that the RingCT commitment parameter H is in fact a multiple of the base point G

On the last paragraph of page 7 of Monero Research Lab's paper about RingCT, the author makes some statements to the effect that it is possible to pick a random point on the base curve ED25519 that is ...
9
votes
2answers
208 views

Will the RingCT fork make it harder for other CryptoNote coins to merge improvements made to Monero?

Monero has already made substantial changes to its codebase. Will the RingCT fork make it harder for other CryptoNote coins to merge improvements made to Monero? Does every major fork make it more ...
9
votes
1answer
516 views

Are Confidential Transactions in Monero perfectly binding or hiding?

Bitcoin contributor Pieter Wuille recently commented on Reddit: Bulletproofs and the Pedersen commitments they operate on are perfectly hiding, but not perfectly binding. This roughly means that ...
8
votes
2answers
2k views

What is RingCT and how does it make Monero private?

I hear that RingCT will make Monero more private than Bitcoin. Is there truth to this?
8
votes
1answer
132 views

Can the size of range proofs be reduced?

Range proofs are currently quite large, roughly 12-30kb. Is it likely that range proofs will become smaller in the future through various optimizations?
8
votes
1answer
276 views

Are RingCT signatures malleable?

Can a RingCT signature of a transaction be slightly modified to create an equivalent transaction (same inputs, same outputs) with a different transaction id?
8
votes
1answer
339 views

Does the key vector approach in RingCT represent linkability among transactions? Can it be exploited by blockchain analysis?

As I understand from MRL-0005 (Definition 4.1 in page 9), when creating a RingCT transaction with, say, m inputs, n outputs, and q mixin, the i-th member (where i=0...q) of the ring signature R is ...
8
votes
1answer
91 views

Has RingCT been reviewed by the other Monero Research Lab members?

Shen Noether has created RingCT and I trust that he has done so in a safe and correct manner, but it never hurts to have more eyes on the crypto. RingCT is currently in testnet and being rigorously ...
8
votes
2answers
260 views

Ring CT and transactions fee

With the future implementation of RingCT, transaction amounts will be hidden. How will a miner determine if a RingCT transaction includes a sufficient enough transaction fee to be included in a block?...
8
votes
1answer
168 views

How can I assist in testing RingCT on the Monero testnet?

I hear that RingCT is currently fully deployed on the Monero testnet, and that we can assist with stress testing the protocol by creating a testnet account ourselves. I created my own testnet wallet ...
8
votes
1answer
118 views

MRL RingCT research in the Ledger Journal

I understand that Ledger: is a peer-reviewed scholarly journal that publishes full-length original research articles on the subjects of cryptocurrency and blockchain technology, as well as any ...
8
votes
1answer
148 views

How can one use RingCT to maximize the privacy of existing wallets?

I think the privacy is not what it should be in my existing wallets is because 1) there are old zero mixin transactions there and 2) it is my understanding that it is possible to estimate the amounts ...
7
votes
1answer
127 views

How sophisticated will Monero's multisig capability be once RingCT is implemented and it's future plans afterwards?

A lot of people talk about the fact that once RingCT is implemented multisig will be possible, but it seems to be a very open statement, can someone give a more comprehensive breakdown of what kind of ...
7
votes
1answer
178 views

How will RingCT dust work?

Right now, if you have a small piece of Monero, you can spend it with mixin 0. That way, you can collect a bunch of them without paying too high of fees. RingCT will hide amounts, meaning it won't be ...
7
votes
1answer
144 views

Issue with unforgeability proof of ASNL in RingCT paper

In the RingCT paper, proof of theorem 5.1 (The Aggregate Schnorr Non-linkable ring signature is unforgeable under the discrete logarithm assumption), it is assumed by contradiction that there exists ...
6
votes
1answer
137 views

As a XMR recipient after HF4 is there a way I can only accept RingCT payments?

This question discusses how both RingCT and non RingCT transactions will be allowed between HF4 and HF5. It also discusses how a user can turn all non RingCT outputs into RingCT outputs. As a Monero ...
6
votes
2answers
87 views

How will RingCT interact with view keys?

Can view keys reveal the amount of a transaction? Will they be able to view outgoing as well as ingoing transactions?
6
votes
1answer
546 views

Will there be a January hard-fork for RingCT?

If there is a earlier hard-fork. Will only the RingCT code be included in the version or every improvement until then? Will this skip the March hard-fork or will the March fork use version 5?
6
votes
1answer
154 views

Will a large and sustained increase in Monero transactions resolve the current issues of the dynamic block size penalty function?

The fee algorithm has not readjusted as intended following the dramatic increase in median transaction size which came with the upgrade to RingCT transactions. A conclusion reached on the subject has ...
6
votes
1answer
155 views

Are RingCT transaction bigger than an average ring signature transaction?

Are RingCT transaction bigger than an average ring signature transaction? If yes how much bigger?
6
votes
1answer
164 views

How will the transition to RingCT work?

When Monero implements RingCT, how will the transition be handled? In particular, how will pre RingCT outputs be migrated into outputs available for use in RingCT transactions?
6
votes
1answer
143 views

RingCT migration to Borromean Ring Signatures and testing

With the recent discovery of a bug in the original ringCT code, and the subsequent update from using ASNL to Borromean Ring Signatures, how much testing has been done since that change, and what kind ...
6
votes
1answer
293 views

Has bandwidth usage or data transferred when mining or hosting a full node increased since the introduction of RingCT?

I've recently started hosting a handful of nodes on my home internet connection and mining to a pool from these machines, it seems as though my internet connection has become a lot slower and a lot of ...
6
votes
1answer
113 views

Small bug with `sweep_all`

I am experimenting with the testnet wallet, so I did a sweep_all to my own address to see how it worked. And so this line came up: Sweeping 0.000000000000 for a total fee of 0.048000000000. Is this ...
5
votes
1answer
222 views

Does Monero/the CryptoNote Protocol support multi signature wallets?

I did not find a question directly asking for multi signatures and Monero. Right now there doesn't seem to be support for multi signatures in Monero. So I want to know if it is technically feasible ...
5
votes
1answer
259 views

How does RingCT prevent doublespend ?

For what I know about RingCT it use fake outputs to mask the amount that is transaction between address's, how do we know that the fakeoutputs are correct and that is noone messing with them?
5
votes
3answers
432 views

How does RingCT work with / without coefficients?

I was trying to get more information on how RingCT works, I found the thread I linked to below here on the stack exchange. In the other thread, the most upvoted answer explains it as a coefficient, ...
5
votes
1answer
68 views

Is public testnet for RingCT planned prior to its release?

Now that a pull request to merge RingCT has appeared in GitHub are there plans to create a public testnet? If so how would someone participate and help test the code?