Questions tagged [confidential-transactions]
Confidential Transactions allow masking the amount and asset type of a transaction in the Liquid network.
28
questions
2
votes
0
answers
43
views
Would efficient Bulletproofs for CT increase transaction sizes? By how much?
Ignoring that it would be a hard fork, if Bitcoin implemented confidential transactions using Bulletproofs -- how much would an average transaction increase estimated in bytes?
(Just looking for a ...
- 1,410
1
vote
0
answers
41
views
Mixed inputs / outputs in liquid transaction
Can one given liquid transaction be made of a mix of blinded and unblinded inputs and/or outputs?
If for example I have 1 input blinded + 1 input unblinded and then 1 output unblinded, one would be ...
- 477
1
vote
0
answers
27
views
Does Liquid block explorer omits range proofs?
I am looking at a random Liquid TX like this one. It is a CT with the total size of 9205 bytes. Am I correct to assume that the bulk of the total size are range proofs, but they are not shown in the ...
- 233
0
votes
1
answer
90
views
How miner collects their transaction fee in Confidential Transaction
These are followup questions from
Transaction Fee in Confidential Transactions
In Confidential Transaction, Alice own 10btc sends 1 btc to Bob
Input : C1 = Commit (10btc) = 10 G + 10 H
Output: C2 = ...
- 335
1
vote
2
answers
115
views
Transaction Fee in Confidential Transactions
Is there any transaction fee for Confidential Transactions in the Liquid Network?
In the UTXO model, Alice has 10 btc. She sends 1 btc to Bob, 8.999 btc as return change, and 0.001 as fee.
Input : 10 ...
- 335
0
votes
2
answers
88
views
Can Confidential Transaction in Liquid Network Blockchain be pruned
From a bitcoin full node, we can prune the blockchain from 350GB to 7GB (as of 30thJune2021) by storing the latest UTXO set plus maybe 120 latest block (for possible orphaning or block reorganization)....
- 335
1
vote
1
answer
130
views
Is a privacy preserving coin mixer possible on Liquid?
My thoughts:
Liquid uses confidential asset and tx. Therefore the asset type and amount is hiding from chain analysis. However the utxo's still carry history. This history could potentially lead chain ...
- 701
1
vote
0
answers
55
views
How is this 1 input 2 output tx larger than this 2 input 2 output tx?
I saw the following liquid transaction with one input and two outputs is byte-wise bigger than another liquid transaction with two inputs and two outputs. How is this possible?
One input transaction (...
- 701
-1
votes
2
answers
200
views
I made mistake sending Bitcoin to old generated address in nairaex ...the transaction still writing unspent...how can I get my Bitcoin back
I got 22 confirmation for Bitcoin not up 50$ and still unspent ,ow can I get it reverse back ,it more than 4hours
4
votes
1
answer
101
views
Could you open a lightning channel in a confidential transaction?
On an elements sidechain (e.g. liquid) could you open a lightning channel with a confidential transaction.
You could probably open a payment channel but could the channel 'speak' to other channels?
Or ...
- 701
-1
votes
1
answer
70
views
Is "Ring Signature" used in "Confidential Transactions" of the Bitcoin?
According to the Ring Confidential Transactions research paper of Monero (Link to the paper), in section 1.5. Ring Confidential Transactions Overview, it is mentioned:
"We describe a modification ...
- 1,151
3
votes
1
answer
107
views
Do confidential transactions produce an UTXO
There must be magical cryptographic reason why CT doesn't create an UTXO.
If it did make an UTXO, it'd be trivial to calculate the input + output right?
- 701
1
vote
1
answer
73
views
Can "Confidential Addresses" preserve user privacy?
Can using "Confidential Addresses" be an alternative to zk-SNARKs to provide an acceptable privacy for a user?
And when we talk about "Confidential Transactions", does it mean we are using "...
- 1,151
2
votes
0
answers
447
views
zk-SNARKs vs. Zk-STARKs vs. BulletProofs? (Updated)
zk-SNARKs, Zk-STARKs and BulletProofs are three major zero knowledge proofs to provide privacy for the blockchain technology.
If we can compare them,
(1) Bulletproofs and Zk-STARKs require no ...
- 1,151
1
vote
1
answer
1k
views
Zerocoin vs. Zerocash ? are they the same ? Or two different protocols?
what is the main difference between Zerocoin vs. Zerocash ? are they the same ? Or two different protocols ? If they are two different protocols, what are similarities ?
- 1,151
1
vote
1
answer
58
views
Proper grammar regarding Bulletproofs
For non-native speakers talking about Bulletproofs with correct grammar is tricky.
I tried to use the white paper as a reference, but it is not consistent. Even in the abstract it mixes plural and ...
- 796
1
vote
1
answer
79
views
In a confidential transaction, what guarantees that the sender packed the correct ephemeral public key for the pederson blinding factor?
I'm reading the Confidential Transactions paper, and it says that the blinding factor in the pedersen commitment is derived using a shared secret, but I can't understand what's preventing the sender ...
- 113
3
votes
1
answer
124
views
Question about blinding factors in Confidential Transaction
In the paper about Confidential Transaction, it is said that the blinding factor for the range proof can be deduced with the shared secret using HMAC. But i didn't understand how the receiver can find ...
- 31
1
vote
1
answer
185
views
About confidential transactions blinding key
I have a small question about confidential transactions. In it, a secret random blinding key is used to generate a Pedersen commitment. Is that mean that the recipient's blinding key is determined by ...
- 11
2
votes
1
answer
366
views
what are chaff coins in cryptocurrency?
I read in several paper about "chaff coins" but I could not find a clear definition for this phenomenon. Does it refer to a specific coin? Is there any "formal" definition for that ?
Reference: ...
- 1,151
1
vote
1
answer
132
views
How does a range proof bound lower at 0 and not -1?
From the confidential transactions article:
C' = C - 1H Then I provide a ring signature over {C, C’}.
If C was a commitment to 1 then I do not know its discrete log, but C’
becomes a ...
- 7,749
2
votes
1
answer
204
views
Confidential transactions: how can they be verified by the network?
I'm currently trying to understand how confidential transactions would work. I think I was able follow all the explanations about Pedersen commitments and the range checks, but I'm still missing one ...
- 123
3
votes
1
answer
255
views
Range proof's Confidential Transaction understanding
I've some doubt about Greg Maxwell Confidential transaction and hope someone can help to make it clear.
A commitment using Elliptic Curve math is:
P=xG + aH
where G,...
- 35
2
votes
1
answer
175
views
Using confidential transactions with plain-text ouputs
I was reading about Confidential Transactions (CT) and understand the basic idea behind it. But what if CT must be bootstrapped on an existing Blockchain such as in Bitcoin, where the amounts are for ...
- 937
3
votes
1
answer
305
views
Sending confidential transaction amount to the receiver
In confidential transaction proposed by Maxwell, instead of transaction amounts we use pedersen commitments to hide the amount and add the range proof to the transaction to prevent overflow. A simple ...
- 864
2
votes
1
answer
393
views
How does ring signature help in range proofs in confidential transaction?
Based on Maxwell's proposal of confidential transaction, a ring signature can solve the range proof issue. I can totally follow the pedersen commitment and everything. I don't quite get how ring ...
- 864
1
vote
1
answer
215
views
Confusion of Confidential Transactions
I'm reading paper of Greg Maxwell's Confidential Transactions, I understand the example about Pederson commitment and Range Proof, which assume the amount is interger (example of proof amount range in ...
- 15
9
votes
2
answers
239
views
Confidential Transactions on main chain
I have seen discussion of CT being used on the a side chain. What are the chances it will be applied to Bitcoin Core itself?
- 321