Hot answers tagged

58 votes
Accepted

How does Monero privacy and security compare to Zcash?

As described by Monero Research Lab academic Shen Noether with regard to the anonymity set: Monero (although the zcash proponents note that a ring signature is a "smaller" anonymity set, ...
21 votes
Accepted

Does Monero offer an equivalent of Check Lock Time Verify transactions?

There is a command to lock coins when you make a transaction by RPC in simplewallet. I don't think it's implemented in the command line interface. It's the unlock_time parameter in the JSON RPC ...
  • 4,383
21 votes
Accepted

What is StringCT?

StringCT is an upgrade to the existing RingCT MLSAG ring signatures. It was initially informally known as RuffCT in honor of Tim Ruffing, who is one of the authors of the paper (soon to be published) ...
  • 8,418
20 votes
Accepted

How much larger are Monero transactions compared to the average Bitcoin transaction?

Most non coinbase Monero transactions are currently around 2,000 bytes (but with significant variation) which is somewhere in the neighborhood of 8 times larger than most Bitcoin non coinbase ...
  • 621
20 votes
Accepted

What are bulletproofs?

Most of the information below is taken from this post on the GetMonero website. To understand bulletproofs, you need to first understand what a range proof is. According to the post: A range proof ...
  • 8,714
18 votes
Accepted

ELI5: How does RingCT work?

Basic idea can be explained by simple arithmetics. Now, we're checking that sum of all inputs must be equal to sum of all outputs. For example: 1+2+3+4 = 3+5+2 Literally, "what comes in must come ...
  • 19.8k
18 votes

How does Monero privacy and security compare to Zcash?

Adding this answer to make it simpler to those who can not understand the top response. ZCash uses a new cryptography tool called zk-SNARK (don't worry about the name). This is different than the ...
  • 8,714
17 votes
Accepted

What is RingCT and how does it compare to Confidential Transactions?

RingCT is based on the Confidential Transactions research you cited (combined with ring signatures) RingCT just like Confidential Transactions hides the amount of each transaction. Unlike ...
  • 1,491
16 votes
Accepted

Spam attack to gain control of many outputs and undermine privacy

We can get a rough idea of a cost lower bound by doing the following: This command looks at the tx_outputs database, which lists all the outputs on the blockchain: mdb_stat -s tx_outputs ~/....
  • 34.6k
15 votes

How much larger are Monero transactions compared to the average Bitcoin transaction?

Non coinbase transactions can start at a couple hundred bytes, and can go up in size a lot if they have a large number of inputs. The main factors driving up size is the number of inputs and mixin. ...
  • 34.6k
13 votes

Can Ring Confidential Transactions Range Proofs be pruned?

Full nodes cannot prune the range proofs entirely in a trustless manner. SPV nodes and those relying on checkpoints could benefit in the manner described by Monero Research Labs below: While the ...
  • 6,533
13 votes
Accepted

What is RingCT and how does it make Monero private?

Yes, that is true, but that is not the only thing. The main privacy enhancing features of Monero are: Ring signatures: make transactions harder to trace by obscuring the output of the true sender in ...
  • 3,327
13 votes
Accepted

In ringct, how are the range proofs kept separate from the pedersen commitments in a transaction?

Suppose the sender wants to create a Pedersen Commitment to the amount of 23 XMR for a new output pubkey in a transaction. Without range proof, the sender simply creates the commitment as: C = a G + ...
  • 2,475
12 votes
Accepted

How many transactions per second can the Monero network handle?

Monero transaction confirmations are very quick on modern computers. With LMDB estimates from developers Smooth and NoodleDoodle are that Monero can handle 1700 TPS (up from 1600 TPS pre LMDB). ...
12 votes

How will the ring CT fork be rolled out?

Does it mean that no upgrade will be required prior to RCT HF? This is currently correct. However, Ring CT is also in a testing phase on testnet. Therefore, there exists a possibility that bugs are ...
  • 14.9k
11 votes
Accepted

Will the RingCT fork make it harder for other CryptoNote coins to merge improvements made to Monero?

Yes, it will. Every time a substantial change is made in one fork, the other forks will find it more difficult to port anything they might want where it conflicts. I'd say the main change from the ...
  • 34.6k
11 votes
Accepted

As a XMR recipient after HF4 is there a way I can only accept RingCT payments?

If by "reject", you mean prevent that transaction from being mined and being available to your private key, then no. If by "reject", you mean only act on rct payments, then you could ask the client ...
  • 34.6k
11 votes
Accepted

What are Borromean signatures?

I happened to have read Greg Maxwell's paper recently, so here I try to lay down my interpretation in a bit abstract manner: Before talking about the Borromean scheme, let us recapitulate the current ...
  • 2,475
11 votes
Accepted

Can someone walk me through a simple example to explain how RingCT works?

Let's say you'll use two of your outputs, 12.34 XMR and 7.89 XMR and send 18.37 XMR to your recipient for a fee of 0.022 XMR and change of 1.838 XMR. If you use mixin of 4, you'll be creating two ...
  • 2,475
10 votes
Accepted

How does ringct interact with multisig?

RingCT will make multisig easier to implement, as the planned multisig system relies on RingtCT building blocks. Contrary to the Bytecoin multisig, Monero's will not be limited to mixin 0 ...
  • 34.6k
10 votes

How much larger would a mixin=4 Monero transaction be compared to a Bitcoin transaction?

Well, looking at a few transactions gives you the answer quite plainly, at least for the Monero side. I'm not familiar with Bitcoin transaction sizes, but I think they're a few hundred bytes, ...
  • 34.6k
10 votes
Accepted

Could Monero help me to implement a safe election for a small group of students?

This is possible with a "daughter" project of Monero called URS (Unique Ring Signatures) and was introduced by core-team member tacotime. From the README of the repository: URS can be used ...
  • 14.9k
10 votes
Accepted

Is Monero the first cryptocurrency to use Confidential Transactions (RingCT), 0MQ, and LMDB?

RingCT RingCT was developed by Monero Research Labs specifically for coins with ring signatures (and even more specifically Monero). Monero is by far the most common of these, and Monero is the first ...
  • 8,714
10 votes

What are 3 types of Ring CT transactions?

Null is used for coinbase transactions. There are no inputs to sign, so no signatures can be provided. If a miner uses this mode (as opposed to tx.version == 1) then the coinbase output can be used as ...
10 votes
Accepted

How will the range proof size reduction be accomplished?

This is a bit speculative, as I do not know exactly what is planned. 1024+ bytes is quite a reduction, so my guess is that the range will be reduced. Currently the spender must prove the output is in ...
9 votes

Can Ring Confidential Transactions Range Proofs be pruned?

The signatures, whether pre or post RingCT, are not needed for a node's own use after they are verified. However, pruning them means the node is unable to supply the full chain to peers, since those ...
  • 34.6k
9 votes
Accepted

Are RingCT signatures malleable?

The transaction ID is based on the hash of everything in the transaction, and the MLSAGs sign everything in the transaction except the MLSAGs themselves. Therefore, changing anything in the ...
  • 34.6k
9 votes

Can the size of range proofs be reduced?

They are currently 6304 bytes (per output). This will drop in the future by at least 1024 bytes. Beyond that will change (or not) with design decisions yet to be made.
  • 2,432
9 votes
Accepted

Are Confidential Transactions in Monero perfectly binding or hiding?

Perfectly hiding. I don't think perfectly binding even existed at the time RCT was developed (not sure, though). As to what should be chosen, think about this: We can always replace lost money, ...
  • 19.8k
8 votes
Accepted

How sophisticated will Monero's multisig capability be once RingCT is implemented and it's future plans afterwards?

Multisig will not be directly available once RingCT is merged. It will need further changes, which will build upon the RingtCT work. It is intended to allow typical N of M threshold signatures, in a ...
  • 34.6k

Only top scored, non community-wiki answers of a minimum length are eligible