Questions tagged [stealth-address]

Stealth addresses allow and require the sender to create random one-time addresses for every transaction on behalf of the recipient. The recipient can publish just one address, yet have all incoming payments go to unique addresses on the blockchain so that only the sender and receiver can determine where a payment was sent making transactions unlinkable

0
votes
1answer
24 views

Where is the ring-signature article by luigi1111 referenced in the multi-part stealth-address steemit post?

Luigi1111's post about stealth-addresses, references throughout that how the stealth addresses are spent from would be covered in a follow-up RingCT article. However, I can't find this follow-up ...
2
votes
1answer
40 views

Is there any enforcement on a transaction output being associated with an address?

As far as I understand, Monero allows Alice to create a public key for Bob that only Bob knows, on the fly, by using the following mechanism: Bob's address: A = aG, B = bG, where only Bob knows a ...
3
votes
1answer
42 views

Simulating stealth address construction with JavaScript

I am trying to build an exercise. I want to produce a random 256-bit seed to give as an input for creating a Monero stealth address. 1) What are the restrictions on this seed in practice? I know it ...
0
votes
1answer
57 views

Are there any neat tricks to enable SPV like functionality for Monero?

I think one of the biggest things holding Monero back from a user experience standpoint is the need for every user to download a large subset of information each time they want to check their balance. ...
2
votes
1answer
46 views

Why is it necessary to have such long addresses?

In the cryptonote paper, it says the address needs to be so long because there has to be a spend key and a view key. where the receiving address is calculated like this; address = Hs(rA)G + B but ...
1
vote
1answer
72 views

Auditing incoming transactions in Monero

It is said that a view key can expose incoming transactions. 1. Is the view key enough to prove ownership of an incoming transaction? The stealth address is calculated with H(Ra)G + B, so I ...
0
votes
2answers
28 views

Does the miner transaction (of a block reward) get sent to a miner's stealth address?

Does the miner transaction (of a block reward) get sent to a miner's stealth address? (Or to the public address of the miner) Thanks.
0
votes
2answers
36 views

Can the receiver determine the value $r$ from the stealth address?

The sender generates $r$, can the receiver determine the value $r$ from the stealth address? Thanks.
1
vote
1answer
64 views

Who receives the change from stealth addresses?

Let's say I have the stealth addresses S1 (unspent outputs = 10 XMR), S2 (unspent outputs = 20 XMR), S3 (unspent outputs = 30 XMR). Then I'm sending 35 XMR of the outputs to another one-time public ...
4
votes
1answer
160 views

Using exponentiations instead of ECC multiplication in computing Stealth address

I'm developing a variant of Monero. Is it possible to change the ECC multiplication rA with r^A of the stealth address term Hs(rA)G+B. And of course also the multiplication by G. IMHO it should ...
3
votes
1answer
100 views

Detecting the real output in ring signature

I have a strange question about the relation of P_i (stealth addresses in ring signature) with x (the one-time private key). Suppose Alice wants to spend P_1 with her spend private key (x) and we ...
2
votes
2answers
141 views

Do stealth address only work with elliptic curve cryptography ?

Monero uses elliptic curve for stealth address generation. And all the things i have read about stealth addresses mention elliptic curve. My question is are there other cryptosystems out there which ...
0
votes
1answer
89 views

Does it make sense to run two nodes in order to disguise your identifiable information?

I'm repeatedly encountering statements related to passive monitoring. Like that: If you send XMR frequently to another person, an attacker passively monitoring both parties will know with ...
3
votes
1answer
106 views

Is a transaction from Exchange to Wallet to Exchange traceable?

Here is an example: Exchange1 --> Adr1; Adr1 --> Exchange2 Where Adr1 is a one-time subaddress. Now suppose that Exchange1 and 2 are corrupt and cooperate with a government to leak my information. ...
3
votes
1answer
118 views

Where is the code that generates stealth addresses and matches them with view keys?

I would like to learn more about the nuts and bolts of how monero implements stealth addresses. I have read the cryptonote whitepaper and have a handle on the math and premise of the concept. But I ...
2
votes
1answer
145 views

Do coinbase transactions use stealth addresses?

When miners are awarded a block reward my understanding is that it occurs using a "Coinbase transaction" do Coinbase transactions send Monero to the Miners public address directly or do they use ...
3
votes
1answer
98 views

Discrepancy CNS006 and CryptoNote whitepaper one-time key generation

CryptoNote 2.0 uses P=Hs(rA)G + B for the generation of a one-time key. CNS006 seems te change this to P=Hs(rA||n)+B, where n is the transaction index (encoded as varint). Why is there this ...
7
votes
1answer
485 views

Stealth addresses: where do they come from?

I wonder what the origin of stealth addresses is. I learned that they were introduced for BitCoin, by Peter Todd. However, I cannot find any literature describing or analysing the specific ...
5
votes
1answer
156 views

Preventing reuse of a stealth address

From https://monero.stackexchange.com/a/4169/4112, from a question asking whether one-time addresses can be reused: Secondly, and this is even worse in my opinion, sending to the same stealth ...
1
vote
1answer
67 views

Can auditor restore transaction dates/times/amounts?

Can date/time/amount/addresses be restored with private view key? Or is just total current balance known. What about with also having private spend key? It would be unfortunate to be in a duress ...
3
votes
2answers
545 views

What all information we can gather from a Monero wallet address?

I am pretty new to this crypto currency. My question is that what all information can be found, if we only know a malicious user's Monero wallet address? Can I check this Monero wallet balance? If ...
4
votes
1answer
119 views

Stealth address, is there a static part at the end?

If I understand things correctly from the whitepaper in order for Alice to send me monero she will use my two public keys A (public view key) and B (public spend key) which she gets from my address (A,...
8
votes
3answers
2k views

What's the point of ring signatures if stealth addresses hide the actual addresses anyways?

I understand generally how ring signatures work, but I also realize they are sent to and from stealth addresses, and so I'm curious why ring signatures are needed in the first place. Doesn't a sender'...
2
votes
1answer
453 views

How do I create a stealth address using the cli monero wallet?

I keep on reading about stealth addresses but am unclear how I would be able to create one using the CLI monero wallet. Can I generate a stealth address using the wallet?
3
votes
1answer
352 views

Can monero-wallet-cli tell me the one-time public keys (outputs) that belong(ed) to it?

When viewing the data on a block explorer, how can I be sure which outputs are mine? Due to Monero using stealth addresses, the block explorers show all the one-time public keys (which are the ...
8
votes
1answer
340 views

Terminology clarification: stealth address

I've seen the term stealth address being used for both: Monero standard address One-time public key I'm guilty of using the term for 2. initially, but later I realized that it may actually refer to ...
2
votes
0answers
69 views

Impact of Topological data analysis on Monero

What is Topological data analysis? Can it be used to study the Monero blockchain and degrade the privacy of transactions as claimed by Gary Le in the interview referenced by this answer?
4
votes
2answers
558 views

Total Amount Of Monero Wallets

Is there currently a way in which to view the total amount of Wallets that have been created for Monero and deposited too? and/or an estimate located anywhere as to the total amount of wallets ...
4
votes
2answers
766 views

How to Properly Generate a Monero Brain Wallet?

I remember reading somewhere, I think it was fluffypony mentioning one could use for example words from a letter to a loved one seed for a Monero wallet. But from playing with https://xmr.llcoins.net/...
7
votes
3answers
199 views

Does publishing view key and key images give the auditor the information on where I sent the funds?

I see here that it's possible to provide information to an auditor to prove the balance at a certain point in time (block height). Would this tell the auditor to where were the funds were sent? Based ...
5
votes
1answer
164 views

Why does the stealth address involve a hash function?

According to the cryptonote white paper, a stealth address of the form P = H_s(rA)G + B. My question is, why is the hash function necessary? It seems that P=rA + B would work just as well. Using a ...
15
votes
2answers
6k views

What is a stealth address?

Canonical question on stealth addresses: They are mentioned in the context of privacy of Bitcoin transactions but are also implemented in Cryptonote based currencies. What are they and how would they ...
11
votes
2answers
1k views

Constructing a Stealth Monero Address?

Is it possible from Section 4. Address Serialization cns007.txt and Section 3. Variable-Length Encoding of Integers cns003.txt to compute a Monero Stealth Address from the following? 1) Private ...
8
votes
2answers
156 views

Examples of real stealth address from the blockchain

I am looking for examples of stealth addresses. Not only theoretically what they are, but real examples. What do they look like in the blockchain?
6
votes
2answers
382 views

If you send two transactions to the same one-time address, will they both be accepted by the blockchain?

A one time address is supposed to be, well, used only once. If you send two transactions to the same one time address, will both transactions be accepted into the block chain? I know that if they ...
5
votes
1answer
213 views

What are the differences between integrated and stealth addresses?

I'm confused what are stealth addresses. Can someone ELI5 what stealth addresses are, how they are generated and used?
3
votes
1answer
174 views

How is the one time address generated from the public address?

Given the public address, how is the one time address generated. Also, cryptographically, what links them?
1
vote
0answers
27 views

How is the address constructed? [duplicate]

How is the address generated? I know it contains the public view key and the public spend key.
13
votes
2answers
203 views

Mandatory vs optional stealth address use

Use of stealth address is optional with Bitcoin and mandatory with Monero. What are the advantages and disadvantages of mandating the use of stealth addresses?
2
votes
1answer
52 views

Is it possible to prove that two outgoing transactions were sent to the same person?

Using Monero instead of Bitcoin, is it possible to trace the transaction and check whether two outgoing transactions were sent to the same person? Does it matter whether transactions are public or not?...
2
votes
1answer
113 views

How CryptoNote protocol protects Monero users?

We can read that Monero possesses significant algorithmic for blockchain obfuscation. In what way it protects users from reading the data from the blockchain?