Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with range-proofs
Search options answers only
not deleted
user 7493
1
vote
Why does the Bulletproof prover always have T1 = rct::scalarmultKey(T1, INV_EIGHT)?
T1 is a curve point. It is multiplied by 8 to ensure it is on the main subgroup of the Ed25519 curve.
- 19.4k
2
votes
Is there a monero wallet that can do a range proof?
The Monero wallets (official or any others that I'm aware of), do not offer any functionality to perform generic range proofs.
For a generic range proof, you could use code as in user679128's answer …
- 19.4k
5
votes
Accepted
How does having a negative number in a Pedersen commitment, create money out of thin air?
A good description of this is found in Greg Maxwell's paper on CT:
(1 + 1) - (-5 + 7) == 0
This would be interpreted as "someone spends two bitcoins, gets a '-5'
bitcoin out that they discard out, …
- 19.4k
1
vote
Accepted
What prevents double-spending?
1st (1 Monero) + 3rd (100 Monero) = 4th_Mine (90 Monero) + range proof balancing (11 Monero)
2nd (1 Monero) + 3rd (100 Monero) = 5th_Mine (90 Monero) + range proof balancing (11 Monero)
Let's call t …
- 19.4k
1
vote
Accepted
Why are rangeproofs necessary?
The example you cite is not using elliptic curve operations.
A Pedersen commitment in Monero takes the form C = xG + aH (alternatively notated C = gx ⋅ ha) and here G and H (or g and h) are elliptic c …
- 19.4k