1

Commitments(outPK) are required when doing a MLSAG signature. However, there is no outPK in a type 0 transaction. example

What should I do as facing this kind of transactions? I've checked rctSigs.cpp but still don't get it..

Many Thanks!

Sorry for the implicit information.. I mean that I'd like to make a tx and some of the outputs are type 0 like this (the number 4/6/9/10 are types 0).

I am curious how to do MLSAG with vins which have no commitments because commitments(OutPk) are required for building a tx.

Mooooo
  • 459
  • 2
  • 8

2 Answers2

3

There is no MLSAG signature on tx type gen.

jtgrassie
  • 19,111
  • 4
  • 14
  • 51
  • Sorry for the implicit information.. I mean that I'd like to make a tx and some of the outputs are type 0 like this(https://community.xmr.to/explorer/stagenet/tx/35988cbac4e2f668f49a0545cca717c5b36f4afb7dec5cf373a607fb7040843d/1) I am curious how to do MLSAG without commitments. – Mooooo Jun 11 '20 at 02:58
  • 1
    The first time you use an amount associated with a gen output, you will be using a zero commitment. There is no preexisting commitment for a gen output as the value is not hidden, it's clear text. Also recall that commitments for the inputs are pseudo output commitments, which you create when you are spending. – jtgrassie Jun 11 '20 at 03:34
1

Referencing section 7.3.6 of ZtM2, coinbase outputs (with amount a) are given a placeholder output commitment C = 1*G + a*H, and that is stored in local copies of the blockchain (each person who downloads the chain has to compute those commitments for each coinbase output). The placeholder commitment is treated like a normal commitment when coinbase outputs are included as ring members in a transaction input's MLSAG signature.

You can find this behavior in src/blockchain_db/blockchain_db.cpp add_transaction().

koe
  • 379
  • 1
  • 9