20
votes
Accepted
How much larger are Monero transactions compared to the average Bitcoin transaction?
Most non coinbase Monero transactions are currently around 2,000 bytes (but with significant variation) which is somewhere in the neighborhood of 8 times larger than most Bitcoin non coinbase ...
- 621
17
votes
Accepted
What is RingCT and how does it compare to Confidential Transactions?
RingCT is based on the Confidential Transactions research you cited (combined with ring signatures)
RingCT just like Confidential Transactions hides the amount of each transaction. Unlike ...
- 1,491
15
votes
How much larger are Monero transactions compared to the average Bitcoin transaction?
Non coinbase transactions can start at a couple hundred bytes, and can go up in size a lot if they have a large number of inputs.
The main factors driving up size is the number of inputs and mixin. ...
- 34.9k
9
votes
Accepted
Are Confidential Transactions in Monero perfectly binding or hiding?
Perfectly hiding. I don't think perfectly binding even existed at the time RCT was developed (not sure, though).
As to what should be chosen, think about this:
We can always replace lost money, ...
- 19.9k
8
votes
How much larger are Monero transactions compared to the average Bitcoin transaction?
The current Monero median block size (last 1,000 blocks) is 286 bytes. The median transaction size is slightly less because some block include multiple transactions. The current median BTC transaction ...
- 223
8
votes
Accepted
Confidential transaction shows amounts
The input comes from a non-RingCT transaction. The outputs are RingCT outputs, and are therefore reflected as 0.
- 5,495
8
votes
Accepted
Can I manually check consistency of Pedersen Commitments in RingCT?
As in my post to MRL Issue #6, I now figured out what pseudoOuts mean. Assuming the outPk means the output commitments, what I'd like to know (assuming the ring signature is valid), would be to see ...
- 2,475
6
votes
How much larger are Monero transactions compared to the average Bitcoin transaction?
2021 update to account for bullet proofs and fixed ring sizes
Real (non-coinbase) transactions in Monero are generally
1425 bytes each now.
The median Bitcoin transaction size is 224 bytes.
- 623
5
votes
Accepted
What exactly are bulletproofs replacing in monero?
Bulletproofs are used to prove that the amounts in confidential transactions are in range, so you can't do underhanded things like creating negative amounts. They replace Borromean range proofs. They ...
- 34.9k
4
votes
Accepted
Transaction structure: Question about ecdhInfo
Both the ecdhInfo mask and amount are encrypted by the sender of the transaction.
Both are encrypted (each in a slightly different way) using the transaction's shared secret (aR).
Therefore both ...
- 8,508
4
votes
How does RingCT work with / without coefficients?
The equation is rct = x*G + a*H(G) where * indicates scalar point multiplication in the ed25519 curve, x is the "mask", G is the base point of the curve (group generator), a is the actual amount, and ...
- 906
3
votes
Accepted
How are transactions validated in monero vs bitcoin?
And KeyImages link to addresses which links to inputs
Any particular key image specified in a ring signature in a transaction must correspond to one of the output public keys (sometimes called ...
- 8,508
3
votes
Accepted
How does signing the hash of the public key show that the signer knew the private key?
How does signing the hash of the public key show that the signer knew the private key?
That's what signatures do. They prove that a private key must have been known for a particular public key that ...
- 8,508
3
votes
Accepted
Why is it necessary in confidential transactions to have two generators?
Normally C = xG + aH where a is the amount and x is the blinding factor.
The point of a Pedersen Commitment is to commit you to a certain value of a. If instead you had C = xG + aG, then this ...
- 8,508
3
votes
Monero transaction from kraken to bitfinex stucks in status confidential transaction
If you sent to an address owned by someone else (Bitfinex), then you cannot use a wallet to recover the funds. It is the responsibility of the address owner (the exchange, Bitfinex) to credit you ...
- 5,495
3
votes
What all information we can gather from a Monero wallet address?
No.
No. Naturally, you can only know about what you sent to that address. You can't know whether that address ever received anything else from the side. When the target spends what you sent to them, ...
- 19.9k
3
votes
Accepted
What is the "SpendProofV1..." or "OutProofV1..." in the details of a sent transaction in the GUI?
tl;dr:
OutProofV1 strings prove you had access to the wallet that constructed a particular transaction. SpendProofV1 strings are used when some wallet information has been lost (because txkeys are ...
- 8,508
3
votes
Accepted
How input pseudo-commitments are calculated?
Good question
Pseudo-Commitments' blinding factors are chosen by payer SUCH AS:
each of them is different from blinding factor of actual input being hidden
the sum of Pseudo-Commitments' blinding ...
- 229
2
votes
Accepted
What happend to my transaction
I searched your transmission hash on XMRchain.org and the coins were sent.
Download the entire block chain to a computer. Check completion status, and when 100.0%, nothing less, reconstitute your ...
- 123
2
votes
Would a fixed ring size improve anonymity?
There are several people close to the Monero project that would tentatively agree with you that a fixed ring size would improve anonymity.
As you point out, if you use a non-default ring size, your ...
- 8,508
2
votes
Making non-native tokens private by using RingCT
RingCT is basically the combination of three things: ring signatures, stealth addresses (one-time output keys) and CT (Confidential Transactions).
The ring signature provides sender ambiguity, the ...
- 19.2k
2
votes
Accepted
How would I exploit the fact that I knew the scalar used for H in the Pedersons Commitment w.r.t G?
The point of a commitment is that it prevents you from later claiming that you'd committed to a different value.
To use the usual algebraic letters, a commitment is C = xG + aH where the value a is ...
- 8,508
2
votes
Accepted
Where is the encrypted Monero amounts in a transaction?
The encrypted/masked amounts are stored in the tx ecdhInfo field.
If you want to view these masked amounts on an explorer:
Visit: https://xmrchain.net/tx/...
- 19.2k
1
vote
Where is the encrypted Monero amounts in a transaction?
You will need the address/subaddress and private view key to decode the amounts.
Go to xmrchain.net and fill in the missing address and viewkey.
Edit: Here's some light reading for deeper knowledge ...
- 484
1
vote
Why must each input have a separate set of decoys?
Mixin 6 means a ring size of 7.
Having 2 real inputs and 5 decoys for an overall ring size of 7 is a lower level of privacy than the current implementation, which would be 2 real inputs and 12 decoys ...
- 8,508
1
vote
Accepted
The entire lifecycle of an XMR transaction with RingCT
I'll do my best to answer:
1) Actually it starts with the wallet, not daemon, aggregating the inputs for spending.
2) The wallet asks the daemon for the mixins (decoys)
6) All values are encrypted ...
- 19.2k
1
vote
Hiding transaction values using pederson commitments and range proofs in accounts model
I'll describe conceptually how they work in Monero, since this is the Monero stackexchange. I'd assume they would work similarly when implemented elsewhere.
Output amounts are encrypted by the sender ...
- 8,508
1
vote
Privacy implications resulting from lack of xmr.to multiple output function
Your analysis is correct, however knowing that the transaction is one of the five transactions (in average) of a block will not help to identify your address as it will be one of the 5*7=35 addresses ...
- 825
1
vote
Privacy implications resulting from lack of xmr.to multiple output function
Let's say it is possible to guess the exact Monero transaction on the blockchain that resulted in the corresponding Bitcoin transaction.
That would not constitute a significant privacy leak. No one ...
- 8,508
1
vote
What all information we can gather from a Monero wallet address?
No, no and no. Monero is inherently private. Look for more information with keywords like: stealth address, ring signature, confidential transactions etc.
- 2,475
Only top scored, non community-wiki answers of a minimum length are eligible