Hot answers tagged

31

Yes, it is possible to restore your account with just the view and spend keys. monero-wallet-cli has the --generate-from-keys <name> option, which will create a wallet with the given name, and prompt the user for: address, spendkey and viewkey. Example: $ monero-wallet-cli --generate-from-keys myWallet Monero 'Helium Hydra' (v0.11.1.0-release) ...


26

This is only feasible with the latest simplewallet from https://github.com/monero-project/bitmonero/, which adds a couple new commands for this (export_key_images and import_key_images). You, who want to prove balance, need to do a few things: in simplewallet, run export_key_images key-images This will save a signed list of key images to the file key-...


21

This question boils to down which selective transparency options both coins offer. I'll start with Monero. In Monero there are three tools for selective transparency, namely the viewkey (called the tracking key in the CryptoNote whitepaper (a,B)), key images (I = xHp(P)), and the private tx key (r). Note that the letters between parentheses correspond to the ...


20

The auditor will see that you have omitted part of the key images. The auditor can see all the outputs received by your account. Without the spend key, the auditor cannot generate the key images corresponding to those, however. In order to prove your balance, you generate a signed list of key images (see https://github.com/monero-project/bitmonero/pull/928 ...


14

To answer this question, we first have to explain how Monero works. The letters used in this answer correspond to the letters used for the math in the CryptoNote whitepaper. Note that scalars (private keys) are always represented by lowercase letters in equations and points (public keys) are always represented by uppercase letters. In Monero you have two ...


14

In fact Zcash does have viewing keys that allow to see all incoming transactions for a certain address. There is also a straightforward way to do proof-of-payment without changing the protocol, although we haven't implemented any RPC interface for that yet: https://github.com/zcash/zcash/issues/737 . Note that a proof of payment necessarily must be ...


11

Currently, this is not possible. There is however a patch that allows just this ready to be merged: https://github.com/moneromooo-monero/bitmonero/tree/signed-key-images This is possible: Two new commands are added that allow proof of reserves: export_key_images will generate a file containing a dump of all an acocunt's key images, sign with the ...


11

Note: the letters between parantheses correspond to the letters used for the math in the CryptoNote whitepaper¹. The public view key (A) and public spend key (B) are the counterparts of the private view key (a) and private spend key (b). The public keys are needed to generate a public address. This is done as follows. First, the private view key and private ...


10

The CryptoNote protocol allows you to verify that your funds arrived safely at your cold wallet address. This is done as follows. You can verify that your funds arrived safely at your cold wallet address using this tool or this explorer/tool. The former tool is created by luigi1111, who is one of the core-team members of Monero, and fetches data from ...


10

You have a public and private spend key, and a public and private view key. The public spend and view keys are used to create an output that only you can see that exists, and that only you can spend. You use your private view key and public spend key to detect the existence of that output. You use your private view key and private spend key to spend the ...


9

It is possible with versions newer than 0.10.1. The process is: Auditor creates the watch wallet, by using your private view key and address. Using your wallet, command export_key_images to export them to a file. Send the file to the auditor. Auditor uses the watch wallet, and commands import_key_images to read them from the file. The watch wallet is now ...


9

If the auditor wanted to confirm you had sent funds to a specific address, they'll then need to have the view key of that address also. The only thing the view key of your address can determine which outputs were sent to its corresponding public key. The key images can confirm when a transaction took place, and how much was was moved from your address. It ...


9

With your account's standard public address and private view key handy: Start simplewallet from the command line with ./simplewallet --generate-from-view-key <wallet name> (Linux/OSX) or simplewallet --generate-from-view-key <wallet name> (Windows) where <wallet name> is the name of your new "watch-only" wallet. simplewallet will prompt ...


9

Anyone without the view key can see the 'long' payment ID (64-char hex string). Here's an example: https://xmrchain.net/tx/09b862419da472c03fc9cb956fc3bd299ec8d36b88a58a79f88c34418de85bb5 Note that it is highly discouraged to reuse the same long payment ID in multiple transactions because those transactions are easily linked. Here's a search result of the ...


9

Let's start with the original question, which is making some false assumptions. Riccardo Spagni answered around 80%, which is a lot and an entity like IRS would not be able to get that many keys from actual users. It's important to clarify 80% of what exactly, as we'll see below. But what about generating millions of accounts every hour to keep having ...


9

When you have 5 monero it actually means that you have some unspent outputs with the total value being 5 monero. Those outputs are actually one-time use containers and you always empty them completely to make new ones. So, if you had 5 monero in a single container, when sending 3 monero to someone, you'd empty your original container and create new ones of ...


8

You can recover the wallet with this simplewallet command: --generate-from-keys


8

View keys will be able to reveal the amount of an incoming transaction, as currently. They will not be able to view outgoing transactions, as currently. Basically, nothing changes on that front.


7

To my knowledge, there is no such service. Rescanning the blockchain from scratch takes a good bit of server resources, and is definitely not a few simple lookups. However, I can think of a way, but one which is discouraged (and I don't feel too bad mentioning it here, since it's a paying service). Generate a view only wallet using the donation address and ...


7

A view key can NOT be used to steal your funds. Think of it as a way of granting someone "Look, but don't touch" access. It is important to remember that the viewkey allows you to see only incoming transactions, not outgoing, so it cannot grant you what would be considered a "live" view of the address' holdings. Therefore a viewkey could safely be ...


7

If you think about it, change comes back in the same transaction as the money you sent. If you receive X monero as change, you will have sent Y monero in the same transaction, with Y > X. The answer to your question boils down to the key images. You give a signed set of key images to the auditor, who can now see money going in and out. See How to prove my ...


7

Is it possible to get a transaction key image from a Paperwallet without exposing the spendkey or seed? It depends on your definition of "expose". Key images can of course be computed offline, even by some self-contained hypothetical device, but you are still "exposing" your spend key to that device. You could do the necessary math on paper if you want, ...


6

I just looked into this, and it seems the method for generating from an address and view key has changed. I am using simplewallet from v0.9.4 and can create a view-only wallet, save it, and then open it again using the following command (I am showing the Monero Developer's donation address and view key here): simplewallet --generate-from-view-key ...


6

The viewkey for that address is: f359631075708155cc3d92a32b75a7d02a5dcf27756707b47a2b31b21c389501 (Taken from https://github.com/fluffypony/bitmonero) Remember, though, that a viewkey only allows you to see any incoming transactions. It does not allow you to see the spent outputs of the address, so it doesn't function the same way as looking up a bitcoin ...


6

I tested simplewallet’s --generate-from-json option, using only the spendkey and the viewkey, and as expected, it worked. However, from Luigi's address test page, I learnt that the "Private View Key" is simply derived (Keccak-256 followed by "sc_reduce32") from the "Hexadecimal Seed", which is identical to the "Private Spend Key". Therefore, it is really ...


6

A certain account will always scan all blocks to look if any transactions belong to it, i.e., if P' = P* (note that P is a stealth address). As you may have already noticed, this will be quite resource intensive. Therefore, services like MyMonero usually use high end servers to do this. In addition, they charge a fee (such as the import fee in case of ...


6

No, he can not. An "output" is actually a one-time key-pair. It consists of an one-time public key, which resides on the blockchain, can be seen by everyone (but it can be matched to a wallet only by having the private view key and the public spend key), and acts as a container which holds some funds. It has a corresponding private key, which can be ...


5

Very unlikely, unless the crypto changes substantially. However, if your goal is to see whether your cold storage has gone bye bye, there is a way to do this (though no current tooling to allow you to do this easily currently): the cold wallet can export the key images for the outputs it received, and a hot wallet can watch the blockchain for those. If they ...


5

XMR Tests takes advantage of the Monero Blocks API to allow you to use the view key and check on a specific transaction For example if you sent a donation to 44AFFq5kSiGBoZ4NMDwYtN18obc8AemS33DBLWs3H7otXft3XjrpDtQGv7SqSsaBYBb98uNbr2VBBEt7f2wfn3RVGQBEP3A You could enter that address, plus the viewkey ...


5

It is impossible to calculate what the address is that corresponds to a given one-time address (there are actually multiple possibility). It is possible to check if a transaction corresponds to a given address. An auditor would need both your outgoing tx keys, and an address book to figure out where the funds are going.


Only top voted, non community-wiki answers of a minimum length are eligible