20 votes
Accepted

How much larger are Monero transactions compared to the average Bitcoin transaction?

Most non coinbase Monero transactions are currently around 2,000 bytes (but with significant variation) which is somewhere in the neighborhood of 8 times larger than most Bitcoin non coinbase ...
user avatar
  • 621
17 votes
Accepted

What is RingCT and how does it compare to Confidential Transactions?

RingCT is based on the Confidential Transactions research you cited (combined with ring signatures) RingCT just like Confidential Transactions hides the amount of each transaction. Unlike ...
user avatar
  • 1,491
15 votes

How much larger are Monero transactions compared to the average Bitcoin transaction?

Non coinbase transactions can start at a couple hundred bytes, and can go up in size a lot if they have a large number of inputs. The main factors driving up size is the number of inputs and mixin. ...
user avatar
  • 34.6k
9 votes
Accepted

Are Confidential Transactions in Monero perfectly binding or hiding?

Perfectly hiding. I don't think perfectly binding even existed at the time RCT was developed (not sure, though). As to what should be chosen, think about this: We can always replace lost money, ...
user avatar
  • 19.8k
8 votes

How much larger are Monero transactions compared to the average Bitcoin transaction?

The current Monero median block size (last 1,000 blocks) is 286 bytes. The median transaction size is slightly less because some block include multiple transactions. The current median BTC transaction ...
user avatar
  • 223
8 votes
Accepted

Confidential transaction shows amounts

The input comes from a non-RingCT transaction. The outputs are RingCT outputs, and are therefore reflected as 0.
user avatar
8 votes
Accepted

Can I manually check consistency of Pedersen Commitments in RingCT?

As in my post to MRL Issue #6, I now figured out what pseudoOuts mean. Assuming the outPk means the output commitments, what I'd like to know (assuming the ring signature is valid), would be to see ...
user avatar
  • 2,475
5 votes
Accepted

What exactly are bulletproofs replacing in monero?

Bulletproofs are used to prove that the amounts in confidential transactions are in range, so you can't do underhanded things like creating negative amounts. They replace Borromean range proofs. They ...
user avatar
  • 34.6k
5 votes

How much larger are Monero transactions compared to the average Bitcoin transaction?

2021 update to account for bullet proofs and fixed ring sizes Real (non-coinbase) transactions in Monero are generally 1425 bytes each now. The median Bitcoin transaction size is 224 bytes.
user avatar
4 votes
Accepted

Transaction structure: Question about ecdhInfo

Both the ecdhInfo mask and amount are encrypted by the sender of the transaction. Both are encrypted (each in a slightly different way) using the transaction's shared secret (aR). Therefore both ...
user avatar
  • 8,398
4 votes

How does RingCT work with / without coefficients?

The equation is rct = x*G + a*H(G) where * indicates scalar point multiplication in the ed25519 curve, x is the "mask", G is the base point of the curve (group generator), a is the actual amount, and ...
user avatar
3 votes
Accepted

How are transactions validated in monero vs bitcoin?

And KeyImages link to addresses which links to inputs Any particular key image specified in a ring signature in a transaction must correspond to one of the output public keys (sometimes called ...
user avatar
  • 8,398
3 votes
Accepted

How does signing the hash of the public key show that the signer knew the private key?

How does signing the hash of the public key show that the signer knew the private key? That's what signatures do. They prove that a private key must have been known for a particular public key that ...
user avatar
  • 8,398
3 votes
Accepted

Why is it necessary in confidential transactions to have two generators?

Normally C = xG + aH where a is the amount and x is the blinding factor. The point of a Pedersen Commitment is to commit you to a certain value of a. If instead you had C = xG + aG, then this ...
user avatar
  • 8,398
3 votes

Monero transaction from kraken to bitfinex stucks in status confidential transaction

If you sent to an address owned by someone else (Bitfinex), then you cannot use a wallet to recover the funds. It is the responsibility of the address owner (the exchange, Bitfinex) to credit you ...
user avatar
3 votes

What all information we can gather from a Monero wallet address?

No. No. Naturally, you can only know about what you sent to that address. You can't know whether that address ever received anything else from the side. When the target spends what you sent to them, ...
user avatar
  • 19.8k
3 votes
Accepted

What is the "SpendProofV1..." or "OutProofV1..." in the details of a sent transaction in the GUI?

tl;dr: OutProofV1 strings prove you had access to the wallet that constructed a particular transaction. SpendProofV1 strings are used when some wallet information has been lost (because txkeys are ...
user avatar
  • 8,398
3 votes
Accepted

How input pseudo-commitments are calculated?

Good question Pseudo-Commitments' blinding factors are chosen by payer SUCH AS: each of them is different from blinding factor of actual input being hidden the sum of Pseudo-Commitments' blinding ...
user avatar
  • 219
2 votes
Accepted

What happend to my transaction

I searched your transmission hash on XMRchain.org and the coins were sent. Download the entire block chain to a computer. Check completion status, and when 100.0%, nothing less, reconstitute your ...
user avatar
2 votes

Would a fixed ring size improve anonymity?

There are several people close to the Monero project that would tentatively agree with you that a fixed ring size would improve anonymity. As you point out, if you use a non-default ring size, your ...
user avatar
  • 8,398
2 votes

Making non-native tokens private by using RingCT

RingCT is basically the combination of three things: ring signatures, stealth addresses (one-time output keys) and CT (Confidential Transactions). The ring signature provides sender ambiguity, the ...
user avatar
  • 17.4k
2 votes
Accepted

How would I exploit the fact that I knew the scalar used for H in the Pedersons Commitment w.r.t G?

The point of a commitment is that it prevents you from later claiming that you'd committed to a different value. To use the usual algebraic letters, a commitment is C = xG + aH where the value a is ...
user avatar
  • 8,398
2 votes
Accepted

Where is the encrypted Monero amounts in a transaction?

The encrypted/masked amounts are stored in the tx ecdhInfo field. If you want to view these masked amounts on an explorer: Visit: https://xmrchain.net/tx/...
user avatar
  • 17.4k
1 vote

Where is the encrypted Monero amounts in a transaction?

You will need the address/subaddress and private view key to decode the amounts. Go to xmrchain.net and fill in the missing address and viewkey. Edit: Here's some light reading for deeper knowledge ...
user avatar
1 vote

Why must each input have a separate set of decoys?

Mixin 6 means a ring size of 7. Having 2 real inputs and 5 decoys for an overall ring size of 7 is a lower level of privacy than the current implementation, which would be 2 real inputs and 12 decoys ...
user avatar
  • 8,398
1 vote
Accepted

The entire lifecycle of an XMR transaction with RingCT

I'll do my best to answer: 1) Actually it starts with the wallet, not daemon, aggregating the inputs for spending. 2) The wallet asks the daemon for the mixins (decoys) 6) All values are encrypted ...
user avatar
  • 17.4k
1 vote

Hiding transaction values using pederson commitments and range proofs in accounts model

I'll describe conceptually how they work in Monero, since this is the Monero stackexchange. I'd assume they would work similarly when implemented elsewhere. Output amounts are encrypted by the sender ...
user avatar
  • 8,398
1 vote

Privacy implications resulting from lack of xmr.to multiple output function

Your analysis is correct, however knowing that the transaction is one of the five transactions (in average) of a block will not help to identify your address as it will be one of the 5*7=35 addresses ...
user avatar
1 vote

Privacy implications resulting from lack of xmr.to multiple output function

Let's say it is possible to guess the exact Monero transaction on the blockchain that resulted in the corresponding Bitcoin transaction. That would not constitute a significant privacy leak. No one ...
user avatar
  • 8,398
1 vote

What all information we can gather from a Monero wallet address?

No, no and no. Monero is inherently private. Look for more information with keywords like: stealth address, ring signature, confidential transactions etc.
user avatar
  • 2,475

Only top scored, non community-wiki answers of a minimum length are eligible