Questions tagged [stealth-address]
Stealth addresses allow and require the sender to create random one-time addresses for every transaction on behalf of the recipient. The recipient can publish just one address, yet have all incoming payments go to unique addresses on the blockchain so that only the sender and receiver can determine where a payment was sent making transactions unlinkable
48
questions
0
votes
1
answer
177
views
Quantum-safe stealth addressing
Many of you will know that the stealth addressing system used in Monero is vulnerable to quantum attacks, due to it being based on quantum-weak cryptography. Although not all payments would be ...
- 21
0
votes
1
answer
90
views
Is XMR private to Wallet Providers?
If XMR Wallet Providers kept logs, would they be able to identify the amount of transactions and the addresses involved in transactions? Do compromised Wallet Providers pose a risk to XMR privacy and ...
1
vote
1
answer
58
views
How Elliptic Curve calculations are possible when using base58 addresses, if these are 552 bits long?
EDIT: I mistakenly use the term Stealth Address when referring to a Monero Wallet Subaddress. Please, be aware.
I'm aware that "bare" Monero addresses aren't used to perform calculations. ...
- 63
0
votes
1
answer
123
views
Why Monero needs ring signature?
I am looking through the whole Monero privacy system, wondering why Monero needs ring signature? One can use stealth address to protect the identities of both sender and receiver.
Suppose the longtime ...
- 133
1
vote
1
answer
120
views
Can sender prove that the transaction was sent to the particular recipient?
I read the article about a Navy nuclear engineer who was arrested and I wondered how can they prove that he actually received XMR from the agent.
As far as I understand, the stealth address is using ...
- 13
1
vote
1
answer
97
views
Monero RPC command for getting global index of one-time public key
I know there is a Monero RPC command /get_outs for getting one-time output (stealth address) information, including the public key, from the global index of the output. Is there a reverse command? In ...
- 111
0
votes
1
answer
91
views
anonymity set (size) for stealth address (receiver)
S1 sends fund to R1 using a stealth addresses.
The anonymity set (size) for the receiver (R1) is the size of all possible receivers in the blockchain.
Once R1 spends the funds, the anonymity set (size)...
- 151
0
votes
1
answer
86
views
Where is the ring-signature article by luigi1111 referenced in the multi-part stealth-address steemit post?
Luigi1111's post about stealth-addresses, references throughout that how the stealth addresses are spent from would be covered in a follow-up RingCT article. However, I can't find this follow-up ...
2
votes
1
answer
52
views
Is there any enforcement on a transaction output being associated with an address?
As far as I understand, Monero allows Alice to create a public key for Bob that only Bob knows, on the fly, by using the following mechanism:
Bob's address: A = aG, B = bG, where only Bob knows a ...
- 145
3
votes
1
answer
120
views
Simulating stealth address construction with JavaScript
I am trying to build an exercise. I want to produce a random 256-bit seed to give as an input for creating a Monero stealth address.
1) What are the restrictions on this seed in practice? I know it ...
- 105
0
votes
1
answer
180
views
Are there any neat tricks to enable SPV like functionality for Monero?
I think one of the biggest things holding Monero back from a user experience standpoint is the need for every user to download a large subset of information each time they want to check their balance. ...
- 11
2
votes
1
answer
102
views
Why is it necessary to have such long addresses?
In the cryptonote paper, it says the address needs to be so long because there has to be a spend key and a view key. where the receiving address is calculated like this;
address = Hs(rA)G + B
but ...
- 201
1
vote
1
answer
125
views
Auditing incoming transactions in Monero
It is said that a view key can expose incoming transactions.
1. Is the view key enough to prove ownership of an incoming transaction?
The stealth address is calculated with
H(Ra)G + B, so I ...
- 177
0
votes
2
answers
47
views
Does the miner transaction (of a block reward) get sent to a miner's stealth address?
Does the miner transaction (of a block reward) get sent to a miner's stealth address? (Or to the public address of the miner)
Thanks.
- 315
0
votes
2
answers
46
views
Can the receiver determine the value $r$ from the stealth address?
The sender generates $r$, can the receiver determine the value $r$ from the stealth address?
Thanks.
- 367
1
vote
1
answer
103
views
Who receives the change from stealth addresses?
Let's say I have the stealth addresses S1 (unspent outputs = 10 XMR), S2 (unspent outputs = 20 XMR), S3 (unspent outputs = 30 XMR). Then I'm sending 35 XMR of the outputs to another one-time public ...
4
votes
1
answer
174
views
Using exponentiations instead of ECC multiplication in computing Stealth address
I'm developing a variant of Monero.
Is it possible to change the ECC multiplication rA with r^A of the stealth address term Hs(rA)G+B.
And of course also the multiplication by G.
IMHO it should ...
- 367
3
votes
1
answer
137
views
Detecting the real output in ring signature
I have a strange question about the relation of P_i (stealth addresses in ring signature) with x (the one-time private key).
Suppose Alice wants to spend P_1 with her spend private key (x) and we ...
- 33
2
votes
2
answers
272
views
Do stealth address only work with elliptic curve cryptography ?
Monero uses elliptic curve for stealth address generation. And all the things i have read about stealth addresses mention elliptic curve. My question is are there other cryptosystems out there which ...
- 123
0
votes
1
answer
235
views
Does it make sense to run two nodes in order to disguise your identifiable information?
I'm repeatedly encountering statements related to passive monitoring.
Like that:
If you send XMR frequently to another person, an attacker passively monitoring both parties will know with increasing ...
- 1
3
votes
1
answer
167
views
Is a transaction from Exchange to Wallet to Exchange traceable?
Here is an example:
Exchange1 --> Adr1;
Adr1 --> Exchange2
Where Adr1 is a one-time subaddress.
Now suppose that Exchange1 and 2 are corrupt and cooperate with a government to leak my information.
...
- 301
3
votes
1
answer
200
views
Where is the code that generates stealth addresses and matches them with view keys?
I would like to learn more about the nuts and bolts of how monero implements stealth addresses.
I have read the cryptonote whitepaper and have a handle on the math and premise of the concept. But I ...
- 161
2
votes
1
answer
193
views
Do coinbase transactions use stealth addresses?
When miners are awarded a block reward my understanding is that it occurs using a "Coinbase transaction" do Coinbase transactions send Monero to the Miners public address directly or do they use ...
- 127
3
votes
1
answer
108
views
Discrepancy CNS006 and CryptoNote whitepaper one-time key generation
CryptoNote 2.0 uses P=Hs(rA)G + B for the generation of a one-time key.
CNS006 seems te change this to P=Hs(rA||n)+B, where n is the transaction index (encoded as varint).
Why is there this ...
- 307
7
votes
1
answer
640
views
Stealth addresses: where do they come from?
I wonder what the origin of stealth addresses is.
I learned that they were introduced for BitCoin, by Peter Todd. However, I cannot find any literature describing or analysing the specific ...
- 307
5
votes
1
answer
268
views
Preventing reuse of a stealth address
From https://monero.stackexchange.com/a/4169/4112, from a question asking whether one-time addresses can be reused:
Secondly, and this is even worse in my opinion, sending to the same stealth ...
- 307
1
vote
1
answer
83
views
Can auditor restore transaction dates/times/amounts?
Can date/time/amount/addresses be restored with private view key? Or is just total current balance known.
What about with also having private spend key?
It would be unfortunate to be in a duress ...
- 139
3
votes
2
answers
1k
views
What all information we can gather from a Monero wallet address?
I am pretty new to this crypto currency. My question is that what all information can be found, if we only know a malicious user's Monero
wallet address?
Can I check this Monero wallet balance? If ...
- 31
4
votes
1
answer
145
views
Stealth address, is there a static part at the end?
If I understand things correctly from the whitepaper in order for Alice to send me monero she will use my two public keys A (public view key) and B (public spend key) which she gets from my address (A,...
- 43
10
votes
3
answers
2k
views
What's the point of ring signatures if stealth addresses hide the actual addresses anyways?
I understand generally how ring signatures work, but I also realize they are sent to and from stealth addresses, and so I'm curious why ring signatures are needed in the first place. Doesn't a sender'...
user4
2
votes
1
answer
716
views
How do I create a stealth address using the cli monero wallet?
I keep on reading about stealth addresses but am unclear how I would be able to create one using the CLI monero wallet.
Can I generate a stealth address using the wallet?
- 83
3
votes
1
answer
508
views
Can monero-wallet-cli tell me the one-time public keys (outputs) that belong(ed) to it?
When viewing the data on a block explorer, how can I be sure which outputs are mine? Due to Monero using stealth addresses, the block explorers show all the one-time public keys (which are the ...
- 5,495
8
votes
1
answer
464
views
Terminology clarification: stealth address
I've seen the term stealth address being used for both:
Monero standard address
One-time public key
I'm guilty of using the term for 2. initially, but later I realized that it may actually refer to ...
- 19.9k
2
votes
0
answers
79
views
Impact of Topological data analysis on Monero
What is Topological data analysis? Can it be used to study the Monero blockchain and degrade the privacy of transactions as claimed by Gary Le in the interview referenced by this answer?
- 321
4
votes
2
answers
682
views
Total Amount Of Monero Wallets
Is there currently a way in which to view the total amount of Wallets that have been created for Monero and deposited too?
and/or an estimate located anywhere as to the total amount of wallets ...
- 473
4
votes
2
answers
1k
views
How to Properly Generate a Monero Brain Wallet?
I remember reading somewhere, I think it was fluffypony mentioning one could use for example words from a letter to a loved one seed for a Monero wallet. But from playing with https://xmr.llcoins.net/...
- 3,327
7
votes
3
answers
268
views
Does publishing view key and key images give the auditor the information on where I sent the funds?
I see here that it's possible to provide information to an auditor to prove the balance at a certain point in time (block height). Would this tell the auditor to where were the funds were sent? Based ...
- 19.9k
5
votes
1
answer
229
views
Why does the stealth address involve a hash function?
According to the cryptonote white paper, a stealth address of the form P = H_s(rA)G + B. My question is, why is the hash function necessary? It seems that P=rA + B would work just as well. Using a ...
- 3,120
18
votes
2
answers
8k
views
What is a stealth address?
Canonical question on stealth addresses: They are mentioned in the context of privacy of Bitcoin transactions but are also implemented in Cryptonote based currencies. What are they and how would they ...
- 685
12
votes
3
answers
3k
views
Constructing a Stealth Monero Address?
Is it possible from Section 4. Address Serialization cns007.txt and Section 3. Variable-Length Encoding of Integers cns003.txt to compute a Monero Stealth Address from the following?
1) Private ...
- 1,566
8
votes
2
answers
720
views
Examples of real stealth address from the blockchain
I am looking for examples of stealth addresses. Not only theoretically what they are, but real examples. What do they look like in the blockchain?
- 83
6
votes
2
answers
1k
views
If you send two transactions to the same one-time address, will they both be accepted by the blockchain?
A one time address is supposed to be, well, used only once.
If you send two transactions to the same one time address, will both transactions be accepted into the block chain? I know that if they ...
- 3,120
5
votes
1
answer
274
views
What are the differences between integrated and stealth addresses?
I'm confused what are stealth addresses. Can someone ELI5 what stealth addresses are, how they are generated and used?
user312
3
votes
1
answer
221
views
How is the one time address generated from the public address?
Given the public address, how is the one time address generated. Also, cryptographically, what links them?
- 3,120
1
vote
0
answers
30
views
How is the address constructed? [duplicate]
How is the address generated? I know it contains the public view key and the public spend key.
- 3,120
13
votes
2
answers
330
views
Mandatory vs optional stealth address use
Use of stealth address is optional with Bitcoin and mandatory with Monero.
What are the advantages and disadvantages of mandating the use of stealth addresses?
- 6,563
3
votes
1
answer
78
views
Is it possible to prove that two outgoing transactions were sent to the same person?
Using Monero instead of Bitcoin, is it possible to trace the transaction and check whether two outgoing transactions were sent to the same person? Does it matter whether transactions are public or not?...
- 1,563
2
votes
1
answer
125
views
How CryptoNote protocol protects Monero users?
We can read that Monero possesses significant algorithmic for blockchain obfuscation.
In what way it protects users from reading the data from the blockchain?
- 1,563