22 votes

What is a stealth address?

Stealth addresses take care of the receiver's privacy, not the sender's. In cryptocurrency, the ability to spend a certain amount of coins is the same as the knowledge of the private key to the ...
  • 3,327
19 votes
Accepted

What is a stealth address?

This is a complex topic that loses many in forest of cryptographic trees, but the following highlights important points required to understand and follow stealth address concepts. Stealth address ...
  • 1,566
13 votes

Constructing a Stealth Monero Address?

In Monero, coins are received to a unique, one-time stealth address. The formula for stealth addresses is as follows: P = Hs(rA)G + B Where: P -- the final stealth address (one-time output key, the ...
  • 14.9k
10 votes
Accepted

Mandatory vs optional stealth address use

The big advantage is that enforcing one time addresses at the protocol level will prevent people from forgetting, or not bothering with using them. In fact, reusing an address in Monero leads to an ...
  • 34.6k
10 votes

Mandatory vs optional stealth address use

Many cryptocurrency users are either uniformed about best privacy practices or too lazy or undisciplined to use them. Automatic stealth addressing adds privacy by unlinkability without requiring any ...
9 votes

Constructing a Stealth Monero Address?

Here is a functional example for deriving a Monero stealth address, developer mechanics not cryptographic theory. Results below duplicate functionality that is part of Crypto Note Test Address. It ...
  • 1,566
9 votes
Accepted

Does publishing view key and key images give the auditor the information on where I sent the funds?

If the auditor wanted to confirm you had sent funds to a specific address, they'll then need to have the view key of that address also. The only thing the view key of your address can determine which ...
9 votes

What's the point of ring signatures if stealth addresses hide the actual addresses anyways?

Stealth addresses mask a receiver, so 5 different people could all send XMR to the same address, but the construction of stealth addresses is such that none of the 5 people could tell that any of the ...
7 votes

What's the point of ring signatures if stealth addresses hide the actual addresses anyways?

Stealth addressing provides unlinkability (outputs are not associated with wallet addresses on the blockchain). Ring signatures provide untraceability. Untraceability means that the source of funds ...
  • 8,418
7 votes
Accepted

Examples of real stealth address from the blockchain

Here's one example: 47c99dab149170154cf1cdfb7e6a5993e1683e9d952aa0502b7b9f27f4129735 This is the public key for the first output in tx http://moneroblocks.info/tx/...
  • 34.6k
6 votes

What are the differences between integrated and stealth addresses?

Q: What are stealth addresses? Stealth addresses are what ensure the unlinkability of Monero transactions. Someone can publish a Monero address and be assured that all incoming payments will be sent ...
  • 6,533
6 votes
Accepted

Stealth addresses: where do they come from?

"Stealth Address" is really just a fancy name for a neat use of Elliptic Curve Diffie-Hellman key exchange. Its use in Monero is described here in detail, but not under that name. This allows for the ...
  • 19.8k
5 votes
Accepted

Total Amount Of Monero Wallets

There is no way and there won't ever be a way. This is becasue Monero is unlinkable, meaning no two destinations can be linked together. In other words, nobody can tell where certain Monero went to, ...
  • 19.8k
5 votes
Accepted

Why does the stealth address involve a hash function?

In your system although the recipient can still find his transaction using R, he would also need to know r for deriving the corresponding private key. You could fix that by making r also public, and ...
  • 3,327
5 votes
Accepted

How to Properly Generate a Monero Brain Wallet?

A brain wallet should always be created offline, preferably on a computer that will never touch the Internet once you decide to use it for a key generator. Make sure any JavaScripts you are using can ...
  • 1,566
5 votes

Does publishing view key and key images give the auditor the information on where I sent the funds?

It is impossible to calculate what the address is that corresponds to a given one-time address (there are actually multiple possibility). It is possible to check if a transaction corresponds to a ...
  • 3,120
5 votes

Examples of real stealth address from the blockchain

Every single transaction uses stealth addresses. There's no way to opt-out of it. So you can just use any block explorer and view a Monero transaction, and you will see that the outputs don't go to ...
  • 1,058
5 votes
Accepted

Detecting the real output in ring signature

The reason we use elliptic curve multiplication is that it is a trapdoor function. This means you can multiply by a point, but you can't divide by a point. Trapdoor functions are an essential ...
  • 8,418
4 votes
Accepted

Is it possible to prove that two outgoing transactions were sent to the same person?

Unless the sender included such information in the transaction (ie, an unencrypted payment id that is identical in both transactions, or very specific amounts sent), it is not possible to determine ...
  • 34.6k
4 votes
Accepted

If you send two transactions to the same one-time address, will they both be accepted by the blockchain?

First, to clarify again, the question is about one-time addresses, i.e. stealth addresses, which are different than the public addresses. The public addresses can be reused freely, whereas the stealth ...
  • 14.9k
4 votes

Does publishing view key and key images give the auditor the information on where I sent the funds?

In monero transactions every output is sent to a One-Time Public Key (stealth address), which is derived from the recipient Public Key, the position or index of the output in the transaction and a ...
4 votes
Accepted

How do I create a stealth address using the cli monero wallet?

You don't, it is created for you when you send. You don't see stealth addresses directly unless you look at a block explorer. Every new output you send is sent to a new one-time stealth address that ...
  • 34.6k
4 votes
Accepted

Can monero-wallet-cli tell me the one-time public keys (outputs) that belong(ed) to it?

You can see the public keys for your outputs with: incoming_transfers verbose For spent ones, or unspent ones, respectively: incoming_transfers verbose unavailable or incoming_transfers verbose ...
  • 34.6k
4 votes
Accepted

Do stealth address only work with elliptic curve cryptography ?

Monero's stealth addressing works like this: You start with a destination wallet address, which is a pair of public keys A, B which have corresponding private keys a, b known only to the recipient. A ...
  • 8,418
3 votes

What all information we can gather from a Monero wallet address?

No. No. Naturally, you can only know about what you sent to that address. You can't know whether that address ever received anything else from the side. When the target spends what you sent to them, ...
  • 19.8k
3 votes

Preventing reuse of a stealth address

Yes, it's possible. In theory, the person spending it could choose which to spend. This is possible because outputs are referenced by block height & index so even if one-time public key is the ...
  • 19.8k
3 votes
Accepted

Discrepancy CNS006 and CryptoNote whitepaper one-time key generation

The CNS006 is correct. In the past outputs had to be split into denominations and without concatenations that'd generate multiple identical outputs (of different amounts) to the same wallet, ...
  • 19.8k
3 votes
Accepted

Where is the code that generates stealth addresses and matches them with view keys?

Private spend and view keys for public Monero addresses are generated here: https://github.com/monero-project/monero/blob/102a51bcd48a3cd2cb794aab7dbe243393f155b3/src/cryptonote_basic/account.cpp#L81 ...
  • 8,418
3 votes
Accepted

Using exponentiations instead of ECC multiplication in computing Stealth address

The reason we use ECC multiplication (which I'm sure you know is not just regular integer multiplication) is that it is a homomorphic trapdoor function. You could potentially use unpadded RSA to ...
  • 8,418

Only top scored, non community-wiki answers of a minimum length are eligible