Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [confidential-transactions]

0
votes
2answers
48 views
3
votes
1answer
40 views

Could you open a lightning channel in a confidential transaction?

On an elements sidechain (e.g. liquid) could you open a lightning channel with a confidential transaction. You could probably open a payment channel but could the channel 'speak' to other channels? Or ...
0
votes
0answers
16 views

Can “Ring Confidential Transactions” be an alternative to “Zero-Knowledge Proofs”?

According to the Monero's paper on Ring Confidential Transactions, the Ring CT protocol is a currency which: requires no trusted setup, hides the identity of the recipient of a transaction, ...
0
votes
1answer
31 views

Is “Ring Signature” used in “Confidential Transactions” of the Bitcoin?

According to the Ring Confidential Transactions research paper of Monero (Link to the paper), in section 1.5. Ring Confidential Transactions Overview, it is mentioned: "We describe a modification ...
2
votes
1answer
55 views

Do confidential transactions produce an UTXO

There must be magical cryptographic reason why CT doesn't create an UTXO. If it did make an UTXO, it'd be trivial to calculate the input + output right?
0
votes
0answers
110 views

Is “Hawk” (a decentralized smart contract system) able to provide acceptable privacy for blockchain?

According to the Hawk paper: "Hawk, a decentralized smart contract system that does not store financial transactions in the clear on the blockchain, thus retaining transactional privacy from ...
1
vote
1answer
38 views

Can “Confidential Addresses” preserve user privacy?

Can using "Confidential Addresses" be an alternative to zk-SNARKs to provide an acceptable privacy for a user? And when we talk about "Confidential Transactions", does it mean we are using "...
2
votes
0answers
223 views

zk-SNARKs vs. Zk-STARKs vs. BulletProofs? (Updated)

zk-SNARKs, Zk-STARKs and BulletProofs are three major zero knowledge proofs to provide privacy for the blockchain technology. If we can compare them, (1) Bulletproofs and Zk-STARKs require no ...
1
vote
1answer
137 views

Zerocoin vs. Zerocash ? are they the same ? Or two different protocols?

what is the main difference between Zerocoin vs. Zerocash ? are they the same ? Or two different protocols ? If they are two different protocols, what are similarities ?
0
votes
0answers
23 views

Is it possible to hide the sender or receiver of transactions by “zk-SNARK” or “Bulletproofs”?

To support the user privacy, is it possible to hide the sender address or receiver address of transactions by "zk-SNARK" or "Bulletproofs" ? Or we’ll be able only to hide the value that is mapped to ...
0
votes
1answer
38 views

Proper grammar regarding Bulletproofs

For non-native speakers talking about Bulletproofs with correct grammar is tricky. I tried to use the white paper as a reference, but it is not consistent. Even in the abstract it mixes plural and ...
1
vote
1answer
55 views

In a confidential transaction, what guarantees that the sender packed the correct ephemeral public key for the pederson blinding factor?

I'm reading the Confidential Transactions paper, and it says that the blinding factor in the pedersen commitment is derived using a shared secret, but I can't understand what's preventing the sender ...
2
votes
1answer
86 views

Question about blinding factors in Confidential Transaction

In the paper about Confidential Transaction, it is said that the blinding factor for the range proof can be deduced with the shared secret using HMAC. But i didn't understand how the receiver can find ...
1
vote
1answer
113 views

About confidential transactions blinding key

I have a small question about confidential transactions. In it, a secret random blinding key is used to generate a Pedersen commitment. Is that mean that the recipient's blinding key is determined by ...
2
votes
1answer
157 views

what are chaff coins in cryptocurrency?

I read in several paper about "chaff coins" but I could not find a clear definition for this phenomenon. Does it refer to a specific coin? Is there any "formal" definition for that ? Reference: ...
1
vote
1answer
105 views

How does a range proof bound lower at 0 and not -1?

From the confidential transactions article: C' = C - 1H Then I provide a ring signature over {C, C’}. If C was a commitment to 1 then I do not know its discrete log, but C’ becomes a ...
3
votes
1answer
149 views

Confidential transactions: how can they be verified by the network?

I'm currently trying to understand how confidential transactions would work. I think I was able follow all the explanations about Pedersen commitments and the range checks, but I'm still missing one ...
2
votes
1answer
176 views

Range proof's Confidential Transaction understanding

I've some doubt about Greg Maxwell Confidential transaction and hope someone can help to make it clear. A commitment using Elliptic Curve math is: P=xG + aH where G,...
3
votes
1answer
146 views

Using confidential transactions with plain-text ouputs

I was reading about Confidential Transactions (CT) and understand the basic idea behind it. But what if CT must be bootstrapped on an existing Blockchain such as in Bitcoin, where the amounts are for ...
3
votes
1answer
200 views

Sending confidential transaction amount to the receiver

In confidential transaction proposed by Maxwell, instead of transaction amounts we use pedersen commitments to hide the amount and add the range proof to the transaction to prevent overflow. A simple ...
2
votes
1answer
321 views

How does ring signature help in range proofs in confidential transaction?

Based on Maxwell's proposal of confidential transaction, a ring signature can solve the range proof issue. I can totally follow the pedersen commitment and everything. I don't quite get how ring ...
1
vote
1answer
179 views

Confusion of Confidential Transactions

I'm reading paper of Greg Maxwell's Confidential Transactions, I understand the example about Pederson commitment and Range Proof, which assume the amount is interger (example of proof amount range in ...
8
votes
2answers
187 views

Confidential Transactions on main chain

I have seen discussion of CT being used on the a side chain. What are the chances it will be applied to Bitcoin Core itself?