Paper 2015/1098

Ring Signature Confidential Transactions for Monero

Shen Noether


This article introduces a method of hiding transaction amounts in the strongly decentralized anonymous cryptocurrency Monero. Similar to Bitcoin, Monero is a cryptocurrency which is distributed through a proof of work ``mining'' process. The original Monero protocol was based on CryptoNote, which uses ring signatures and one-time keys to hide the destination and origin of transactions. Recently the technique of using a commitment scheme to hide the amount of a transaction has been discussed and implemented by Bitcoin Core Developer Gregory Maxwell. In this article, a new type of ring signature, A Multi-layered Linkable Spontaneous Anonymous Group signature is described which allows for hidden amounts, origins and destinations of transactions with reasonable efficiency and verifiable, trustless coin generation. The author would like to note that early drafts of this were publicized in the Monero Community and on the bitcoin research irc channel. Blockchain hashed drafts are available in \cite{Snoe}.

Note: I have expanded several sections, fixed multiple typos, and included some demo code. No changes to the underlying research have been made.

Available format(s)
Publication info
Preprint. MINOR revision.
Contact author(s)
shen noether @ gmx com
2015-12-17: revised
2015-11-11: received
See all versions
Short URL
Creative Commons Attribution


      author = {Shen Noether},
      title = {Ring Signature Confidential Transactions for Monero},
      howpublished = {Cryptology ePrint Archive, Paper 2015/1098},
      year = {2015},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.