Monero Stack Exchange
Monero Stack Exchange

Questions tagged [key-image]

Questions about key images including how they are computed and how they are used to prevent the double spending of Monero

39 questions
19
votes
1 answer

Can I fake a balance by giving the view key to an auditor but omitting some transactions and key images?

The viewkey can be used to see the outputs sent to my address, but not the outputs I generate when sending monero. If I need to know the balance I also need the private spendkey. It is suggested that if I were to give the viewkey and a big list of…
Ryan
  • 1,257
  • 8
  • 13
17
votes
4 answers

What is a key image?

When a transaction is made with monero there is a 'key image' in the transaction info. what is this exactly? is it like the diffie-hellman exchange to create the one time addresses?
samwellj
  • 3,215
  • 4
  • 17
  • 32
10
votes
1 answer

Is it safe to share my key images with other people?

Let's say I run a charity that wants to show people how much money comes in and out of my Monero wallet. If I export the key images, is it safe to publish them on my website, or does doing so open up the possibility that somebody may break my…
user4
9
votes
1 answer

How do key images really work?

I have the following questions regarding the equation I=xHp(P): What is the hash function Hp? How can we know that Hp(P) is a point on the Ed25519 curve? Or is it not? Is the value I published with the transaction? How can an external person verify…
thelastone
  • 193
  • 5
9
votes
3 answers

How does the recent patched key image exploit work in practice?

For more info https://getmonero.org/2017/05/17/disclosure-of-a-major-bug-in-cryptonote-based-currencies.html This has been patched months ago and was never exploited which can be proven by running a node because it checks every transaction's key…
samwellj
  • 3,215
  • 4
  • 17
  • 32
7
votes
1 answer

What signature prevents me from spending others' coins?

In passive mixing, the monero wallet finds n other parties and forms a ring signature that proves the signer is one of the parties in the ring, and hence entitled to spend from one of the accounts associated with one of the ring parties. I don't…
bekah
  • 455
  • 2
  • 7
7
votes
3 answers

Does publishing view key and key images give the auditor the information on where I sent the funds?

I see here that it's possible to provide information to an auditor to prove the balance at a certain point in time (block height). Would this tell the auditor to where were the funds were sent? Based on my understanding, the answer should be no - is…
JollyMort
  • 20,004
  • 3
  • 49
  • 105
5
votes
3 answers

Is making a key image public equal to giving the monero in that output away?

So I read about proving your balance to an auditor, and someone suggested that you can share your view key, exposing all outputs that you received on that address. If you then give out all key images (created from your private spend key & the…
vrwim
  • 377
  • 2
  • 8
5
votes
1 answer

What is the deterministic hash to EC function used to construct the key image?

Ring signatures alone would allow double spending, so Monero (as a result of following the CrpytoNote whitepaper) has to use a 'key image', which is the same across identical transactions and hence causes attempts at double spending to be…
bekah
  • 455
  • 2
  • 7
5
votes
2 answers

Can the import\export key images command can be used to check the balance of a paperwallet?

The import/export key images command can be used to check the balance of a view only wallet. But is there a way to use it to check the balance of an already set up Paperwallet? Is it possible to get a transaction key image from a Paperwallet without…
ant Bldel
  • 1,281
  • 8
  • 15
4
votes
2 answers

Understanding MLSAG in Monero transaction

This is a followup question to Understanding the structure of Monero transaction with emphasis on the MLSAG part. Here's the transaction's structure again given with print_tx 3cf34714d411d051722ec32990bf46567c7ae3432871f75f58005cb6b5b3021e: Found in…
oleiba
  • 177
  • 5
4
votes
2 answers

Key-image generation: What does p signify in I = xHp(P)?

According to the CN whitepaper key image I is generated thusly: I = xHp(P) I understand P is the one-time public key for the transaction, x the corresponding private key and H a deterministic hash function, but what is p? Thanks
ArrestedDevlopment
  • 43
  • 4
4
votes
1 answer

Can an output be used as a decoy after it has been spent?

The title of the question is probably specific enough, but I'll give more color anyway. Here's a quick timeline. I received output A a year ago. In the last year, output A has been a decoy in 3 transactions. Today, I spend output A; therefore the…
scoobybejesus
  • 5,515
  • 21
  • 42
4
votes
1 answer

What are the "ingredients" of a key image?

This is a scenario I've come up with to help me understand key images. Let's say I have Wallet 1 and Wallet 2. Wallet 1 has TXO A and TXO B. I send TXO A and TXO B as inputs to Wallet 2. TXO B was reduced to pay transaction fees. Then I send TXO…
scoobybejesus
  • 5,515
  • 21
  • 42
4
votes
1 answer

Help needed with calculating a key image

I am working on monero synchronization on an ARM cortex m4 microcontroller and I got stuck with computing key image. As a testing data I created a fresh wallet A and a fresh wallet B. I funded wallet A with some amount, then I did a swipe_all and…
ivanahepjuk
  • 149
  • 5
1
2 3