Cryptology ePrint Archive: Report 2015/1098

Ring Signature Confidential Transactions for Monero

Shen Noether

Abstract: This article introduces a method of hiding transaction amounts in the strongly decentralized anonymous cryptocurrency Monero. Similar to Bitcoin, Monero is a cryptocurrency which is distributed through a proof of work ``mining'' process. The original Monero protocol was based on CryptoNote, which uses ring signatures and one-time keys to hide the destination and origin of transactions. Recently the technique of using a commitment scheme to hide the amount of a transaction has been discussed and implemented by Bitcoin Core Developer Gregory Maxwell. In this article, a new type of ring signature, A Multi-layered Linkable Spontaneous Anonymous Group signature is described which allows for hidden amounts, origins and destinations of transactions with reasonable efficiency and verifiable, trustless coin generation. The author would like to note that early drafts of this were publicized in the Monero Community and on the bitcoin research irc channel. Blockchain hashed drafts are available in \cite{Snoe}.

Category / Keywords: ring signatures confidential transactions bitcoin monero

Date: received 11 Nov 2015, last revised 17 Dec 2015

Contact author: shen noether at gmx com

Available format(s): PDF | BibTeX Citation

Note: I have expanded several sections, fixed multiple typos, and included some demo code. No changes to the underlying research have been made.

Version: 20151217:200440 (All versions of this report)

Short URL: ia.cr/2015/1098

Discussion forum: Show discussion | Start new discussion


[ Cryptology ePrint archive ]