Questions tagged [range-proofs]
20 questions
17
votes
1 answer
What are bulletproofs?
I have heard that Monero transactions are relatively large, and that Bulletproofs will make Monero transactions smaller. Can someone give a high-level overview about what these are, and how they effect Monero?
sgp
- 8,836
- 7
- 43
- 113
11
votes
2 answers
Can Ring Confidential Transactions Range Proofs be pruned?
RingCT adds a set of range proofs to each transaction. Can these be pruned? Would there be a need for "full nodes" which retain these proofs? If so, why?
Alexde
- 1,498
- 1
- 10
- 18
11
votes
1 answer
How will the range proof size reduction be accomplished?
According to this answer
Range proofs are currently 6304 bytes (per output) and will drop in the future by at least 1024 bytes.
How will the future 1024 byte reduction per output be accomplished?
Assuming proper implementation will there be any…
seek adventure
- 2,239
- 14
- 52
10
votes
3 answers
In ringct, how are the range proofs kept separate from the pedersen commitments in a transaction?
Are the range proofs and pedersen commitments part of a transaction? Or are they not kept in a transaction at all?
samwellj
- 3,215
- 4
- 17
- 32
8
votes
1 answer
Can the size of range proofs be reduced?
Range proofs are currently quite large, roughly 12-30kb. Is it likely that range proofs will become smaller in the future through various optimizations?
Alexde
- 1,498
- 1
- 10
- 18
7
votes
1 answer
Proving amount of Monero - Range Proofs
As far as i understand Monero currently uses range proofs (Soon to be bulletproofs) to prove that when an amount of Monero is sent that amount is between 0 and some large number. this is to protect against negative amounts being sent
My question…
KamLazar
- 127
- 5
6
votes
1 answer
How will RingCT dust work?
Right now, if you have a small piece of Monero, you can spend it with mixin 0. That way, you can collect a bunch of them without paying too high of fees.
RingCT will hide amounts, meaning it won't be apparent to the blockchain if something is dust.…
Christopher King
- 3,120
- 14
- 65
4
votes
1 answer
What is the "SpendProofV1..." or "OutProofV1..." in the details of a sent transaction in the GUI?
I'm guessing it's either the Confidential Transaction range-proof? Or is it some kind of proof-of-payment I can send to the recipient to prove... payment...?
Either way, what privacy or security is lost if that detail is shared or exposed?
pinhead
- 143
- 4
4
votes
1 answer
Impact of Range Proof Optimizations on M_O
After beginning at 60kB, the M_0 (minimum penalty-free block size) proved problematic after the v4 fork (introduction of RingCT) led to increased transaction (and block) sizes. Following an initial recommendation of 240kB from JollyMort, further…
Smart Kid
- 6,583
- 2
- 37
- 63
3
votes
1 answer
Using Monero as proof of funds
I'm writing an article about the future of Healthcare. I wondered if it was possible to use Monero to make a proof of funds. For example: the hospital wants to know that I can pay for the medical care I'm going to receive, I sign some kind of…
Symeof
- 242
- 1
- 5
3
votes
1 answer
How will payment metadata be incorporated into the range proof?
According to this comment, which reads:
@kenshi84 I now agree with JollyMort's idea that we should not allow integrated subaddresses and should not allow multiple integrated addresses in a multiple destination payout, because we're likely to choose…
sgp
- 8,836
- 7
- 43
- 113
3
votes
2 answers
Why does the Bulletproof prover always have T1 = rct::scalarmultKey(T1, INV_EIGHT)?
I am reading the source code of Monero. In the Bulletproof prover, there is always a line like T1 = rct::scalarmultKey(T1, INV_EIGHT). Why is there always a INV_EIGHT multiplication with the point? Can anyone help me? Thank you.
Felix LL
- 133
- 4
3
votes
1 answer
How does having a negative number in a Pedersen commitment, create money out of thin air?
Given two inputs of value: 10, 11
And two outputs of value 31, -10
The Pedersen commitment would look like:
Let b + c - d - e = k
(10G + bH + 11G + cH) - (31G + dH + -10G + eH) = 0G + kH
Without range proofs, this Pedersen commitment would look…
WeCanBeFriends
- 670
- 3
- 7
3
votes
1 answer
What exactly are bulletproofs replacing in monero?
I am stuck on these questions in understanding bulletproofs:
Are bulletproofs a way to hide the sender and the amount?
What is the difference between bulletproofs, RingCT and Ring signatures?
Edit:
Confidential txs just hide the amount.
RingCT is…
WeCanBeFriends
- 670
- 3
- 7
2
votes
1 answer
Why are rangeproofs necessary?
Title. This is probably a remarkably stupid question, but I digress. Now, I understand the point of rangeproofs, but I don't understand why they're actually necessary.
So, rangeproofs prevent a malicious user from committing to a negative number in…
needed athrowaway
- 23
- 3