20

The auditor will see that you have omitted part of the key images. The auditor can see all the outputs received by your account. Without the spend key, the auditor cannot generate the key images corresponding to those, however. In order to prove your balance, you generate a signed list of key images (see https://github.com/monero-project/bitmonero/pull/928 ...


18

Funny you should ask, Taushet, because indeed there is! The Taushet USB Monero Cold Wallet Generator is a pre-packaged, pre-hashed and pre-zipped collection of the tools required to make a secure wallet that only requires a single checking/security hash. It takes around 10 minutes to make a secure cold wallet. The tool has been hashed and verified by many ...


14

Monero Cold Storage, Monitoring, and Spending Guide (MS Windows) - Part 1: Creating The Wallet Create a bootable USB drive. Follow instructions here. Get the latest Monero Core binaries. If you followed step 1. to the letter, you will need Windows 64-bit binaries. Extract from .zip and copy them to your bootable drive. Reboot into your USB drive. When it ...


12

The most straightforward way is probably to generate 256 bits of entropy (a fair 20 sided dice will give you a bit more than 4 bits per roll, so make it 64 rolls), and record all these throws in the custom entropy box at https://moneroaddress.org, then generate a new wallet from this. You'll have downloaded this page first (it can run standalone from your ...


11

There is no support for SSS in simplewallet. This would require some amount of new modexp code to be added (unless a variant of it can be made using EC cryptography, but I'm not aware of any). So the best you can do is use a standalone SSS tool such as ssss (see http://point-at-infinity.org/ssss/). It may already be in your distribution's packages. Example,...


10

You need to have a cold and hot wallet pair for the same account. In the hot wallet, make a transaction. It doesn't have the spend key, so instead of actually sending the transaction to the Monero network, it will save the necessary information to a file called unsigned_monero_tx (no choice of name for now). Next step is to transfer that information to the ...


10

Ok, here is another version. It's not perfect or detailed and it will probably need some additional research. Preparation: Get an old computer (and seal its Ethernet port with duct tape – this computer will not touch the Internet again) Get several fresh USB sticks Wipe the old computer and the USB sticks (you can use something like DBAN to wipe ...


10

In essence, the most secure method would be to create a live bootable OS on a USB stick, access it on a machine that is not connected to the internet, and then generate your mnemonic seed and address using a GPG-verified program. But for an actual, detailed response, instead of copy/pasting someone else's guide entirely, I'll refer you to the extensive ...


10

In Monero, coins are received to a unique, one-time stealth address. The formula for stealth addresses is as follows: P = Hs(rA)G + B Where: P -- the final stealth address (one-time output key, the destination where funds will actually be sent); Hs* -- a hashing algorithm that returns a scalar (i.e., the hash output is interpreted as an integer and ...


10

The CryptoNote protocol allows you to verify that your funds arrived safely at your cold wallet address. This is done as follows. You can verify that your funds arrived safely at your cold wallet address using this tool or this explorer/tool. The former tool is created by luigi1111, who is one of the core-team members of Monero, and fetches data from ...


9

I personally would not trust a run of the mill D20 as the vast majority simply aren't made to roll in a genuinely random manner http://www.1000d4.com/2013/02/14/how-true-are-your-d20s/ http://www.dakkadakka.com/wiki/en/That%27s_How_I_Roll_-_A_Scientific_Analysis_of_Dice If you are paranoid, then nothing less than truly random dice like those used in ...


9

I will try to combine the above answers and my own information into one answer. After recovering my wallet with my mnemonic seed, do I need to synchronize the entire blockchain before I can send a transaction? Once you have your wallet, all you need is access to a monero blockchain with the proper data to send a transaction. Access to a monero blockchain ...


9

What is stored inside them? Does the wallet store the public and private keys and nothing else? Or does it contain the list of transactions related to the wallet as well and their location on the blockchain? The wallet-name.address.txt stores only the address. It is just for convenience if you want to know your address without having to open the wallet. In ...


9

The procedure is a bit more involved for Monero, but you can do this in two ways: The easy one off solution is to gather the standard address you sent to, the txkey for the transaction (you said you sent the monero, so you should have it: the txkey is the private key of a random keypair generated when you send a monero transaction: you can get it with ...


8

Excellent question. I suppose the only way, for now, would be to boot into a clean system by using a live CD with network access, syncing the daemon, restoring your wallet*, syncing the wallet and immediately spending what you intended to spend (or send to your "hot" wallet) and then sending the remainder to a new cold storage. This last step is an important ...


8

Logan is correct, but I'll go into more details about the first question: You technically do not need to sync the whole blockchain, though you'll want to do it to save headaches. What you need to is sync enough to (1) get your owned outputs (or at least the ones which you will be sending), (2) get the transactions spending your outputs (or at least the ones ...


8

The Trezor code will be made open source when NoodleDoodle thinks it is ready. Currently it is only suitable for testing with very small amounts of Monero because until it is open-souce, it cannot be trustless. SatoshiLabs is willing to eventually update their firmware once the code is open-source and thoroughly tested. NoodleDoodle prefers to wait until ...


7

In Monero the change is sent back to the same (public) address. Therefore, it would, in theory, be possible to spend a portion of the balance of a cold storage wallet. However, currently the binaries have no feature available to sign your transaction offline. A possible solution to this is compiling yourself and using this patch. From the patch: This ...


7

Is it possible to get a transaction key image from a Paperwallet without exposing the spendkey or seed? It depends on your definition of "expose". Key images can of course be computed offline, even by some self-contained hypothetical device, but you are still "exposing" your spend key to that device. You could do the necessary math on paper if you want, ...


7

Monero uses a Keccak based PRNG. I believe this is one that was proposed by the team behind Keccak, though I am not 100% certain. The seeding is done from /dev/urandom (or, for Windows, some Windows specific API). There is no reseeding, but the Keccak construction is rated for LOTS of random numbers before reseeding is needed. See "Sponge-based pseudo-...


7

On the internet-facing computer: You can have a hot wallet (or many) in addition to your cold signing wallet. You will need to have a watch only wallet matching the cold wallet (ie, same keys, the view wallet just didn't get told about the spend private key). The "cold transaction-signing wallet" is not on the internet facing computer. The view wallet is. ...


6

First, we assume you have a fully-synced node and fully-refreshed watch-only wallet on the hot computer. Also, we assume you have wallet software on the cold computer (don't need the node, just monero-wallet-cli). Using watch-only wallet, command export_outputs <filename>. There will be a file with <filename> created in the working folder*. Copy ...


6

Here is a functional example for deriving a Monero stealth address, developer mechanics not cryptographic theory. Results below duplicate functionality that is part of Crypto Note Test Address. It is worth noting custom bytes_to_words, sc_reduce32, and secret_key_to_public_key executables (coded in C or C++) below were named after Monero's functions that ...


6

I just looked into this, and it seems the method for generating from an address and view key has changed. I am using simplewallet from v0.9.4 and can create a view-only wallet, save it, and then open it again using the following command (I am showing the Monero Developer's donation address and view key here): simplewallet --generate-from-view-key ...


6

There is an offline wallet generator for Aeon here: https://bitcointalk.org/index.php?topic=641696.msg17660358#msg17660358 This is the same as the Monero one, but adapted for Aeon. The post above says it's new and you should make sure you can restore your address before trusting an address/keys set made with the generator, just in case, but the Monero ...


5

Very unlikely, unless the crypto changes substantially. However, if your goal is to see whether your cold storage has gone bye bye, there is a way to do this (though no current tooling to allow you to do this easily currently): the cold wallet can export the key images for the outputs it received, and a hot wallet can watch the blockchain for those. If they ...


5

The currently easiest way is to restore your seed using the CLI wallet, spend what you want to spend and immediately send the remainder to a newly created cold storage. See here for some more considerations. To make syncing the wallet faster, you can start the CLI wallet with --restore-deterministic-wallet --restore-height <h> arguments, where <h&...


5

You do the same, except using monero-wallet-cli --generate-from-keys, which will use the spend key in addition to the view key. You will be prompted for the information when you run this. See a guide for using --generate-from-keys here: If I saved my view key and spend key can I recover my wallet if my mnemonic seed is lost?


5

It introduced most of the commands mentioned in this guide: import & export outputs import & export key images offline transaction generation pushing transactions generated offline to the network Some bugs were observed during testing, which were fixed prior to the point release. Also, I'm not sure it was even possible to perform cold spending ...


Only top voted, non community-wiki answers of a minimum length are eligible