Questions tagged [ringct]

New protocol designed by the Monero Research Labs combining ring signatures from CryptoNote with Confidential transactions. RingCT transactions are not only untraceable (ring signature) but also keep the transaction amount private (confidential transaction).

Filter by
Sorted by
Tagged with
3
votes
1answer
54 views

Where can I find the selection of the decoys (stealthy addresses) when constructing a transaction?

When constructing a new transaction, I have reached the function cryptonote_core/cryptonote_tx_utils.cpp/construct_tx_with_tx_key() and I am trying to understand where the decoys came from? How and ...
3
votes
1answer
147 views

How do ring signatures work when there are multiple UTXOs from which you have to collect monero coin?

User A has 3 UTXOs which sum up to 10 XMR. How does the Key Image ensure that all three utxos cannot be double spent?
2
votes
2answers
98 views

Cannot get version 2 transactions to work on private testnet

I built Monero private testnet (basically used these instructions https://github.com/moneroexamples/private-testnet, but with the latest codebase). Everything seemed to work fine, but I realized that ...
2
votes
1answer
138 views

How can I choose addresses to create a ring signature for a transaction

I am doing a project based on blockchain, and I found that Monero is a good candidate for my project because of its ring signature scheme. The scenario is that I would like to create a transaction ...
2
votes
1answer
167 views

What are Ring Members?

So as I understand, ring members are decoy outputs on the XMR Blockchain. Are these outputs originially public addresses (like in the BTC Chain) but have been hidden somehow? How have they been hidden?...
4
votes
2answers
336 views

Understanding MLSAG in Monero transaction

This is a followup question to Understanding the structure of Monero transaction with emphasis on the MLSAG part. Here's the transaction's structure again given with print_tx ...
3
votes
0answers
86 views

Non RingCT transactions since RingCT mandatory

RingCT is mandatory since block 1400000, yet there are 95 non ringct transactions since that block and block 1500000. User iDunk on IRC suggested that this could be the result of the command ...
2
votes
2answers
2k views

How does Ring Confidential Transactions work?

Can someone explain to me how RingCT works and how the recipient gets the actual amount from the encrypted amount in a RingCT transaction?
2
votes
2answers
93 views

How the sender recover the transactions that he spent?

In order to compute the balance of his own wallet, (I assume that) a client needs to retrieve: 1- The transaction that he is the receiver.(By scanning the whole block-chain and compare with his own ...
5
votes
1answer
267 views

Transaction structure: Question about ecdhInfo

This question by kenshi84 shows how the pseudoOuts and outPk fields can be validated by anyone (without knowing any of the private keys involved), by checking that sumIn === sumOut: > var H = ...
3
votes
0answers
230 views

ZK-STARK vs ring-ct size and verification

How does the transaction size of ZK-STARK transactions compare with ring-CT? Also I understand it requires a lot of ram and computing power to create a ZK-STARK, does it take the same amount of ram ...
4
votes
1answer
221 views

Would a fixed ring size improve anonymity?

Currently the ring size of a transaction can be set by the sender. One would think that using a ring size of 10 makes the transaction more anonymous than using a ring size of 5 (current default) as ...
4
votes
0answers
82 views

MLSAG adaptation?

I understand that the main reason why the RCTTypeFull scheme is not applied to multi-input transactions is that the true signing keys in the MLSAG algorithm are on the same row, which impacts ...
1
vote
1answer
117 views

Commitments for RCTTypeSimple transactions

Looking at the code, and after reading a post on the subject, it looks as if transactions of type RCTTypeSimple (multi-input, RCT) get new commitments with new blinding factors for the inputs. Doesn'...
16
votes
1answer
3k views

What are bulletproofs?

I have heard that Monero transactions are relatively large, and that Bulletproofs will make Monero transactions smaller. Can someone give a high-level overview about what these are, and how they ...
4
votes
1answer
181 views

How Ed25519 curve relates to Borromean Ring Signature scheme?

Is it correct to say that Monero private keys are generated using Ed25519 curve and then Borromean Ring Signature scheme is used to sign transactions? In other words, is Ed25519 curve "compatible" ...
1
vote
1answer
70 views

Additional keys/commitments for MLSAG

There is one thing I don't understand about the MLSAG signature. The additional public keys mixed into the signature ring, must correspond to real unspent outputs in the blockchain, isn't it? ...
9
votes
1answer
550 views

Are Confidential Transactions in Monero perfectly binding or hiding?

Bitcoin contributor Pieter Wuille recently commented on Reddit: Bulletproofs and the Pedersen commitments they operate on are perfectly hiding, but not perfectly binding. This roughly means that ...
3
votes
2answers
315 views

Confused about the RingCT protocol

I'm a newcomer. I'm a bit confused about the current protocol and I don't quite feel like reading the code yet. I've been reading Shen Noether's paper as well as related work. (1) I understand that ...
1
vote
0answers
99 views

“Error: One of the destinations is zero” on Monero CLI wallet when trying to send a transaction with >6000 ring signatures?

I wanna do 7500 ring CTs on my transaction but I keep getting that error. Anyone know a work-around? Also when I lower it to 5000 ring CTs I get "Error: failed to find a suitable way to split ...
3
votes
2answers
209 views

Maximizing privacy when dealing with pre RingCT outputs

When spending from a cold storage wallet with multiple pre RingCT (and no post RingCT) outputs what are the best privacy practices? Spending in this context means the eventual moving of these funds ...
1
vote
1answer
90 views

How do you make sure a sender isn't sending bogus funds?

It is my understanding that RingCT allows the verifier to make sure that the sum of the inputs is the same as the sum of the outputs in a transaction, so that no monero is magically created or lost. ...
1
vote
0answers
56 views

Borromean signatures in monero commiting to an empty string?

In the codebase, the Borromean signatures to reduce the size of range proofs seem to sign an empty string,which is different from the paper by Maxwell et al. Is it true? Thanks for any answer.
14
votes
1answer
2k views

What is StringCT?

I saw some recent comments about RuffCT/StringCT, which is a supposed improvement to RingCT. What is RuffCT/StringCT, and how is it different than RingCT? What improvements (if any) will this bring to ...
1
vote
2answers
243 views

How to sweep the contents of a specific output?

I noticed that the sweep_all command warns when it is about to merge outputs from the same transaction, which I appreciate, as that would kind of break the point of ring signatures and make my ...
4
votes
2answers
195 views

Is the 'pseudoOuts' of 'rctSig' the commitment on input amounts for simple RCT

It seems that the genRctSimple function will make a different input commitment for each input amount (line 675-683 in file src/rct/rctSigs.cpp). And summation of these input commitments = output ...
3
votes
0answers
95 views

How does RingCT work? [duplicate]

How does RingCT work in hiding transaction amounts and how can it ensure that an output with 3 monero is used in a transaction with outputs of 1 and 2 monero but not 2 and 2?
2
votes
1answer
356 views

Is it possible to reset the blockchain with a new genesis block for efficiency?

I am researching state prunning, and I saw here that AEON state prunning does helps a bit, with some issues though because of historical reasons (details in the link). Would it be possible to reset ...
5
votes
3answers
464 views

How does RingCT work with / without coefficients?

I was trying to get more information on how RingCT works, I found the thread I linked to below here on the stack exchange. In the other thread, the most upvoted answer explains it as a coefficient, ...
6
votes
1answer
162 views

Will a large and sustained increase in Monero transactions resolve the current issues of the dynamic block size penalty function?

The fee algorithm has not readjusted as intended following the dramatic increase in median transaction size which came with the upgrade to RingCT transactions. A conclusion reached on the subject has ...
5
votes
1answer
196 views

Wolfram Warptangent, Point Release 10.2.1 performance improvements

There have been multiple reports of massive reductions in memory and CPU usage with the new Monero 10.2.1 point release. What specific optimizations led to the "massive speed improvements to RingCT ...
4
votes
2answers
165 views

RingCT code usage in other projects

Aside from AEON are there any other coins that have made efforts to integrate RingCT? Are there any reports of RingCT interest for privacy use cases other than currency (smart contracts, etc) outside ...
10
votes
1answer
563 views

Can someone walk me through a simple example to explain how RingCT works?

Original: https://www.reddit.com/r/Monero/comments/5irg81/questions_regarding_the_cryptography_behind_ringct/ I just read the RingCT paper, and there are a couple things that could use some clearing ...
2
votes
1answer
232 views

Error with transaction on the blockchain

Today I experienced the strangest error while sending moneros from one wallet to another. So thought I would share and see if anyone knows what was the cause or could shed anymore light on it. Sent ...
4
votes
2answers
314 views

How are outPk, mask and amount fields created when spending RignCT coinbase transactions?

RingCT coinbase transactions don't have ecdhInfo fields with mask, outPk and amount. For example, this is how ringct coinbase transactions looks like (look at JSON representation): https://explorer....
6
votes
1answer
312 views

Has bandwidth usage or data transferred when mining or hosting a full node increased since the introduction of RingCT?

I've recently started hosting a handful of nodes on my home internet connection and mining to a pool from these machines, it seems as though my internet connection has become a lot slower and a lot of ...
4
votes
1answer
290 views

Confidential transaction shows amounts

My understanding is that confidential transactions "hide" the amount exchanged. However I have found a confidential transaction where the input amount is visible. Is that expected?
3
votes
1answer
119 views

How do fees affect tx priority and how did these specific high fee tx's sit unconfirmed for > 1hr

Can anyone explain to me why several high fee (0.1-0.15) RingCT tx's, that did not look abnormal, sat in the mempool for over an hour unconfirmed, while lower fee (.025 ish) similar looking RingCT tx'...
11
votes
1answer
271 views

How will the range proof size reduction be accomplished?

According to this answer Range proofs are currently 6304 bytes (per output) and will drop in the future by at least 1024 bytes. How will the future 1024 byte reduction per output be accomplished? ...
11
votes
1answer
838 views

What are 3 types of Ring CT transactions?

In monero, there are three types of RingCT transactions: enum { RCTTypeNull = 0, RCTTypeFull = 1, RCTTypeSimple = 2, }; They can be observed in https://xmrchain.net/ But it's not clear what ...
2
votes
1answer
96 views

Monero privacy features different from coin shuffling used in nxt/ardor?

How are Monero privacy features different from coin shuffling used in nxt/ardor? https://nxtwiki.org/wiki/Coin_Shuffling
3
votes
1answer
236 views

With RingCT on, can I lower mixin safely to save on tx fees?

Now that RingCT is on and transactions are many times bigger, would a mixin of 1, for example, be safe enough to keep a good level of privacy? I'm mainly asking because many pool operators have ...
1
vote
1answer
216 views

Can someone help me read a block explorer?

If I enter a transaction no. (not trx id) in a site like blox.supportXMR.com I see first of all 2 outputs with amounts of 0. Then below I see 2 inputs that are broken down into groups of "stealth" ...
5
votes
1answer
156 views

How does RingCT increase in transaction sizes affect people?

With the recent hardfork of RingCT there has been talk about the transaction sizes increasing to 25kb on average which is a lot more than before. My question is how does that affect people? Does it ...
8
votes
1answer
133 views

Can the size of range proofs be reduced?

Range proofs are currently quite large, roughly 12-30kb. Is it likely that range proofs will become smaller in the future through various optimizations?
3
votes
2answers
210 views

How do I make RingCT transactions now after the recent hardfork?

As the title says. Can I make RingCT transactions now on mainnet. If so, how? What is the command or its options in simplewallet?
8
votes
1answer
122 views

MRL RingCT research in the Ledger Journal

I understand that Ledger: is a peer-reviewed scholarly journal that publishes full-length original research articles on the subjects of cryptocurrency and blockchain technology, as well as any ...
4
votes
1answer
118 views

Will it be possible to prune all non-RingCT outputs once we know they are all converted into RingCT outputs?

Inspired by this question, I realized that it's actually possible to know how much unspent non-RingCT outputs exist (although we cannot know which are unspent) by checking the total amount converted ...
4
votes
1answer
139 views

How do ringct transactions use previous non-ringct outputs in a ring signature with ringct?

How will ringct transactions use non-ringct outputs to use in a ring signature? Is there any trick that gets them to work together with ringct or is it pretty simple and I am missing something?
6
votes
1answer
152 views

RingCT migration to Borromean Ring Signatures and testing

With the recent discovery of a bug in the original ringCT code, and the subsequent update from using ASNL to Borromean Ring Signatures, how much testing has been done since that change, and what kind ...