Questions tagged [confidential-transactions]

Confidential Transactions allow masking the amount and asset type of a transaction in the Liquid network.

Filter by
Sorted by
Tagged with
9 votes
2 answers
239 views

Confidential Transactions on main chain

I have seen discussion of CT being used on the a side chain. What are the chances it will be applied to Bitcoin Core itself?
Jamal Wilson's user avatar
4 votes
1 answer
105 views

Could you open a lightning channel in a confidential transaction?

On an elements sidechain (e.g. liquid) could you open a lightning channel with a confidential transaction. You could probably open a payment channel but could the channel 'speak' to other channels? Or ...
Bertram Lund's user avatar
3 votes
1 answer
113 views

Do confidential transactions produce an UTXO

There must be magical cryptographic reason why CT doesn't create an UTXO. If it did make an UTXO, it'd be trivial to calculate the input + output right?
Bertram Lund's user avatar
3 votes
1 answer
308 views

Sending confidential transaction amount to the receiver

In confidential transaction proposed by Maxwell, instead of transaction amounts we use pedersen commitments to hide the amount and add the range proof to the transaction to prevent overflow. A simple ...
abeikverdi's user avatar
3 votes
1 answer
257 views

Range proof's Confidential Transaction understanding

I've some doubt about Greg Maxwell Confidential transaction and hope someone can help to make it clear. A commitment using Elliptic Curve math is: P=xG + aH where G,...
Bartok's user avatar
  • 35
3 votes
1 answer
124 views

Question about blinding factors in Confidential Transaction

In the paper about Confidential Transaction, it is said that the blinding factor for the range proof can be deduced with the shared secret using HMAC. But i didn't understand how the receiver can find ...
Irogama's user avatar
  • 31
2 votes
1 answer
368 views

what are chaff coins in cryptocurrency?

I read in several paper about "chaff coins" but I could not find a clear definition for this phenomenon. Does it refer to a specific coin? Is there any "formal" definition for that ? Reference: ...
Questioner's user avatar
  • 1,151
2 votes
1 answer
395 views

How does ring signature help in range proofs in confidential transaction?

Based on Maxwell's proposal of confidential transaction, a ring signature can solve the range proof issue. I can totally follow the pedersen commitment and everything. I don't quite get how ring ...
abeikverdi's user avatar
2 votes
1 answer
206 views

Confidential transactions: how can they be verified by the network?

I'm currently trying to understand how confidential transactions would work. I think I was able follow all the explanations about Pedersen commitments and the range checks, but I'm still missing one ...
Michael Jung's user avatar
2 votes
1 answer
175 views

Using confidential transactions with plain-text ouputs

I was reading about Confidential Transactions (CT) and understand the basic idea behind it. But what if CT must be bootstrapped on an existing Blockchain such as in Bitcoin, where the amounts are for ...
Bjarne Magnussen's user avatar
2 votes
0 answers
43 views

Would efficient Bulletproofs for CT increase transaction sizes? By how much?

Ignoring that it would be a hard fork, if Bitcoin implemented confidential transactions using Bulletproofs -- how much would an average transaction increase estimated in bytes? (Just looking for a ...
Jonathan Cross's user avatar
2 votes
0 answers
452 views

zk-SNARKs vs. Zk-STARKs vs. BulletProofs? (Updated)

zk-SNARKs, Zk-STARKs and BulletProofs are three major zero knowledge proofs to provide privacy for the blockchain technology. If we can compare them, (1) Bulletproofs and Zk-STARKs require no ...
Questioner's user avatar
  • 1,151
1 vote
2 answers
118 views

Transaction Fee in Confidential Transactions

Is there any transaction fee for Confidential Transactions in the Liquid Network? In the UTXO model, Alice has 10 btc. She sends 1 btc to Bob, 8.999 btc as return change, and 0.001 as fee. Input : 10 ...
Cisco Mmu's user avatar
  • 335
1 vote
1 answer
216 views

Confusion of Confidential Transactions

I'm reading paper of Greg Maxwell's Confidential Transactions, I understand the example about Pederson commitment and Range Proof, which assume the amount is interger (example of proof amount range in ...
D.V.'s user avatar
  • 15
1 vote
1 answer
1k views

Zerocoin vs. Zerocash ? are they the same ? Or two different protocols?

what is the main difference between Zerocoin vs. Zerocash ? are they the same ? Or two different protocols ? If they are two different protocols, what are similarities ?
Questioner's user avatar
  • 1,151
1 vote
1 answer
147 views

Is a privacy preserving coin mixer possible on Liquid?

My thoughts: Liquid uses confidential asset and tx. Therefore the asset type and amount is hiding from chain analysis. However the utxo's still carry history. This history could potentially lead chain ...
Bertram Lund's user avatar
1 vote
1 answer
58 views

Proper grammar regarding Bulletproofs

For non-native speakers talking about Bulletproofs with correct grammar is tricky. I tried to use the white paper as a reference, but it is not consistent. Even in the abstract it mixes plural and ...
nopara73's user avatar
  • 806
1 vote
1 answer
74 views

Can "Confidential Addresses" preserve user privacy?

Can using "Confidential Addresses" be an alternative to zk-SNARKs to provide an acceptable privacy for a user? And when we talk about "Confidential Transactions", does it mean we are using "...
Questioner's user avatar
  • 1,151
1 vote
1 answer
81 views

In a confidential transaction, what guarantees that the sender packed the correct ephemeral public key for the pederson blinding factor?

I'm reading the Confidential Transactions paper, and it says that the blinding factor in the pedersen commitment is derived using a shared secret, but I can't understand what's preventing the sender ...
PowerPanda's user avatar
1 vote
1 answer
185 views

About confidential transactions blinding key

I have a small question about confidential transactions. In it, a secret random blinding key is used to generate a Pedersen commitment. Is that mean that the recipient's blinding key is determined by ...
N.aN's user avatar
  • 11
1 vote
1 answer
132 views

How does a range proof bound lower at 0 and not -1?

From the confidential transactions article: C' = C - 1H Then I provide a ring signature over {C, C’}. If C was a commitment to 1 then I do not know its discrete log, but C’ becomes a ...
Jimmy Song's user avatar
  • 7,759
1 vote
0 answers
43 views

Mixed inputs / outputs in liquid transaction

Can one given liquid transaction be made of a mix of blinded and unblinded inputs and/or outputs? If for example I have 1 input blinded + 1 input unblinded and then 1 output unblinded, one would be ...
bordalix's user avatar
  • 477
1 vote
0 answers
28 views

Does Liquid block explorer omits range proofs?

I am looking at a random Liquid TX like this one. It is a CT with the total size of 9205 bytes. Am I correct to assume that the bulk of the total size are range proofs, but they are not shown in the ...
DeLorean88's user avatar
1 vote
0 answers
55 views

How is this 1 input 2 output tx larger than this 2 input 2 output tx?

I saw the following liquid transaction with one input and two outputs is byte-wise bigger than another liquid transaction with two inputs and two outputs. How is this possible? One input transaction (...
Bertram Lund's user avatar
0 votes
1 answer
90 views

How miner collects their transaction fee in Confidential Transaction

These are followup questions from Transaction Fee in Confidential Transactions In Confidential Transaction, Alice own 10btc sends 1 btc to Bob Input : C1 = Commit (10btc) = 10 G + 10 H Output: C2 = ...
Cisco Mmu's user avatar
  • 335
0 votes
2 answers
92 views

Can Confidential Transaction in Liquid Network Blockchain be pruned

From a bitcoin full node, we can prune the blockchain from 350GB to 7GB (as of 30thJune2021) by storing the latest UTXO set plus maybe 120 latest block (for possible orphaning or block reorganization)....
Cisco Mmu's user avatar
  • 335
-1 votes
2 answers
200 views

I made mistake sending Bitcoin to old generated address in nairaex ...the transaction still writing unspent...how can I get my Bitcoin back

I got 22 confirmation for Bitcoin not up 50$ and still unspent ,ow can I get it reverse back ,it more than 4hours
Sammmighty's user avatar
-1 votes
1 answer
71 views

Is "Ring Signature" used in "Confidential Transactions" of the Bitcoin?

According to the Ring Confidential Transactions research paper of Monero (Link to the paper), in section 1.5. Ring Confidential Transactions Overview, it is mentioned: "We describe a modification ...
Questioner's user avatar
  • 1,151