Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [confidential-transactions]

2
votes
1answer
42 views

Do confidential transactions produce an UTXO

There must be magical cryptographic reason why CT doesn't create an UTXO. If it did make an UTXO, it'd be trivial to calculate the input + output right?
-1
votes
0answers
28 views

Hide the ID of confidential transactions in blockchain networks

For a confidential blockchain, suppose there are three people which join a series of transactions. To hide the number of transactions among them, they need to do some dummy transactions. Suppose the ...
0
votes
0answers
40 views

Is “Hawk” (a decentralized smart contract system) able to provide acceptable privacy for blockchain?

According to the Hawk paper: "Hawk, a decentralized smart contract system that does not store financial transactions in the clear on the blockchain, thus retaining transactional privacy from ...
1
vote
1answer
33 views

Can “Confidential Addresses” preserve user privacy?

Can using "Confidential Addresses" be an alternative to zk-SNARKs to provide an acceptable privacy for a user? And when we talk about "Confidential Transactions", does it mean we are using "...
1
vote
0answers
165 views

zk-SNARKs vs. Zk-STARKs vs. BulletProofs? (Updated)

zk-SNARKs, Zk-STARKs and BulletProofs are three major zero knowledge proofs to provide privacy for the blockchain technology. If we can compare them, (1) Bulletproofs and Zk-STARKs require no ...
1
vote
1answer
52 views

Zerocoin vs. Zerocash ? are they the same ? Or two different protocols?

what is the main difference between Zerocoin vs. Zerocash ? are they the same ? Or two different protocols ? If they are two different protocols, what are similarities ?
0
votes
0answers
15 views

Is it possible to hide the sender or receiver of transactions by “zk-SNARK” or “Bulletproofs”?

To support the user privacy, is it possible to hide the sender address or receiver address of transactions by "zk-SNARK" or "Bulletproofs" ? Or we’ll be able only to hide the value that is mapped to ...
0
votes
1answer
38 views

Proper grammar regarding Bulletproofs

For non-native speakers talking about Bulletproofs with correct grammar is tricky. I tried to use the white paper as a reference, but it is not consistent. Even in the abstract it mixes plural and ...
0
votes
0answers
46 views

Confidential Transactions and the downsides of transaction privacy

I'm wondering whether there are resources discussing the following, or whether people have thought about it significantly: The potential downsides to the introduction of Confidential Transactions ...
1
vote
1answer
51 views

In a confidential transaction, what guarantees that the sender packed the correct ephemeral public key for the pederson blinding factor?

I'm reading the Confidential Transactions paper, and it says that the blinding factor in the pedersen commitment is derived using a shared secret, but I can't understand what's preventing the sender ...
2
votes
1answer
71 views

Question about blinding factors in Confidential Transaction

In the paper about Confidential Transaction, it is said that the blinding factor for the range proof can be deduced with the shared secret using HMAC. But i didn't understand how the receiver can find ...
1
vote
1answer
99 views

About confidential transactions blinding key

I have a small question about confidential transactions. In it, a secret random blinding key is used to generate a Pedersen commitment. Is that mean that the recipient's blinding key is determined by ...
2
votes
1answer
145 views

what are chaff coins in cryptocurrency?

I read in several paper about "chaff coins" but I could not find a clear definition for this phenomenon. Does it refer to a specific coin? Is there any "formal" definition for that ? Reference: ...
1
vote
1answer
98 views

How does a range proof bound lower at 0 and not -1?

From the confidential transactions article: C' = C - 1H Then I provide a ring signature over {C, C’}. If C was a commitment to 1 then I do not know its discrete log, but C’ becomes a ...
3
votes
1answer
128 views

Confidential transactions: how can they be verified by the network?

I'm currently trying to understand how confidential transactions would work. I think I was able follow all the explanations about Pedersen commitments and the range checks, but I'm still missing one ...
2
votes
1answer
148 views

Range proof's Confidential Transaction understanding

I've some doubt about Greg Maxwell Confidential transaction and hope someone can help to make it clear. A commitment using Elliptic Curve math is: P=xG + aH where G,...
3
votes
0answers
127 views

Using confidential transactions with plain-text ouputs

I was reading about Confidential Transactions (CT) and understand the basic idea behind it. But what if CT must be bootstrapped on an existing Blockchain such as in Bitcoin, where the amounts are for ...
3
votes
1answer
190 views

Sending confidential transaction amount to the receiver

In confidential transaction proposed by Maxwell, instead of transaction amounts we use pedersen commitments to hide the amount and add the range proof to the transaction to prevent overflow. A simple ...
2
votes
1answer
302 views

How does ring signature help in range proofs in confidential transaction?

Based on Maxwell's proposal of confidential transaction, a ring signature can solve the range proof issue. I can totally follow the pedersen commitment and everything. I don't quite get how ring ...
1
vote
1answer
175 views

Confusion of Confidential Transactions

I'm reading paper of Greg Maxwell's Confidential Transactions, I understand the example about Pederson commitment and Range Proof, which assume the amount is interger (example of proof amount range in ...
8
votes
2answers
179 views

Confidential Transactions on main chain

I have seen discussion of CT being used on the a side chain. What are the chances it will be applied to Bitcoin Core itself?