New protocol designed by the Monero Research Labs combining ring signatures from CryptoNote with Confidential transactions. RingCT transactions are not only untraceable (ring signature) but also keep the transaction amount private (confidential transaction).
Questions tagged [ringct]
166 questions
20
votes
1 answer
ELI5: How does RingCT work?
Can someone explain simply how RingCT can make sure that a user has the specified amounts without seeing it? My mind starts to pause as soon as i see formulas on a whitepaper.
JollyMort
- 19,934
- 3
- 46
- 105
11
votes
1 answer
What are 3 types of Ring CT transactions?
In monero, there are three types of RingCT transactions:
enum {
RCTTypeNull = 0,
RCTTypeFull = 1,
RCTTypeSimple = 2,
};
They can be observed in https://xmrchain.net/
But it's not clear what differences there are among the three types, and why…
QuriousAboutRingCT
- 111
- 2
5
votes
1 answer
How does RingCT increase in transaction sizes affect people?
With the recent hardfork of RingCT there has been talk about the transaction sizes increasing to 25kb on average which is a lot more than before.
My question is how does that affect people? Does it affect greatly people who run a full node? Does it…
user202
- 199
- 1
- 6
5
votes
1 answer
Where is the encrypted mask value?
Checked this link: https://moneroblocks.info/api/get_transaction_data/4adb55cde1ffcc0ea639b6718355c48c0e574000306d95ef857e55d91ddabcf2
I could not find the encrypted mask value.
I believe the encrypted amount is in the ecdh part:
"ecdhInfo": [
…
WeCanBeFriends
- 660
- 3
- 7
4
votes
2 answers
How is the used Pedersen commitment kept secret?
I understand one can have two commitments P and Q, and show the world that P - Q = 0 - communicating the commitment to only the recipient. In fact, it can be done with many input commitments P1 ... Pn. However, how do the other commitments remain…
Nicholas Pipitone
- 101
- 6
3
votes
2 answers
How do I make RingCT transactions now after the recent hardfork?
As the title says. Can I make RingCT transactions now on mainnet. If so, how? What is the command or its options in simplewallet?
NewRingCTuser
- 31
- 1
3
votes
1 answer
Where can I find the selection of the decoys (stealthy addresses) when constructing a transaction?
When constructing a new transaction, I have reached the function cryptonote_core/cryptonote_tx_utils.cpp/construct_tx_with_tx_key() and I am trying to understand where the decoys came from? How and when are they selected?
adsl
- 315
- 1
- 8
2
votes
1 answer
How does a Monero node know to reject Borromean range proofs
Now that Bulletproofs have been deployed, how does a Monero node know to reject any Borromean range proofs?
Is there something like a checkpoint, so that after block N, no more Borromean range proofs are allowed?
WeCanBeFriends
- 660
- 3
- 7
2
votes
1 answer
How is there no key image for the commitment to zero in MLSAG?
zero to monero 5.7.2 mentions there not being a key image for the commitment to zero. How is this possible?
Quote: "Recalling Section 5.6.3, there is no key image for the commitments to zero zjG, and consequently..."
I was under the impression that…
WeCanBeFriends
- 660
- 3
- 7
2
votes
1 answer
Key image forgery
Given a keypair (k,K); the key image is calculated as:
KeyImage = k * H(K)
What is stopping someone from giving a fake K in the hash function?
WeCanBeFriends
- 660
- 3
- 7
2
votes
1 answer
Different MLSAG implementations across papers
In MRL005, See page9, they describe the signing key for a given ring as Sum public keys + SumInputs - SumOutputs
In zero to monero, Page49 section "MLSAG signature for inputs", they describe it as SumInputs - SumOutputs
Could someone explain the…
WeCanBeFriends
- 660
- 3
- 7
2
votes
1 answer
How does commitment to zero work?
Given two inputs each with their respective committed amounts; P1, P2.
Then given two outputs each with their own respective committed amounts; P3, P4.
We want to prove that the inputs - outputs - fee * G = 0
P1 = a1 * G + r1 * H
P2 = a2 * G + r2 *…
WeCanBeFriends
- 660
- 3
- 7
1
vote
1 answer
Additional keys/commitments for MLSAG
There is one thing I don't understand about the MLSAG signature.
The additional public keys mixed into the signature ring, must correspond to real unspent outputs in the blockchain, isn't it?
Otherwise one could identify them as just obfuscating…
Kurt
- 131
- 2
1
vote
1 answer
Why do we have MLSAG when we only need two keys?
If I understand correctly, MLSAG is being used only when we have two keys. Is it being used in other places when we have maybe three or more keys?
To clarify, by two keys I mean we are trying to prove ownership of the private key for two public keys…
WeCanBeFriends
- 660
- 3
- 7
1
vote
1 answer
What is the difference between tx version 1 and RingCT version 2?
What were the changes from version 1 to version 2?
I think that version 1, did not have confidential txs, but was still based on cryptonote?
I'm also guessing that in version 1, we did not have these different signature types like RCTTypeSimple and…
WeCanBeFriends
- 660
- 3
- 7