3

Intuitively: You are spending an output P, where P=xG. You spend an output by providing a signature proving you know the private key x corresponding to the public key P. If you also declare the key image I=xHp(P) as part of the transaction, you are declaring a public key I with private key x. You are correct that in isolation, transaction verifiers cannot ...


Only top voted, non community-wiki answers of a minimum length are eligible