Paper 2017/921

RingCT 2.0: A Compact Accumulator-Based (Linkable Ring Signature) Protocol for Blockchain Cryptocurrency Monero

Shi-Feng Sun, Man Ho Au, Joseph K. Liu, Tsz Hon Yuen, and Dawu Gu


In this work, we initially study the necessary properties and security requirements of Ring Confidential Transaction (RingCT) protocol deployed in the popular anonymous cryptocurrency Monero. Firstly, we formalize the syntax of RingCT protocol and present several formal security definitions according to its application in Monero. Based on our observations on the underlying (linkable) ring signature and commitment schemes, we then put forward a new efficient RingCT protocol (RingCT 2.0), which is built upon the well-known Pedersen commitment, accumulator with one-way domain and signature of knowledge (which altogether perform the functions of a linkable ring signature). Besides, we show that it satisfies the security requirements if the underlying building blocks are secure in the random oracle model. In comparison with the original RingCT protocol, our RingCT 2.0 protocol presents a significant space saving, namely, the transaction size is independent of the number of groups of input accounts included in the generalized ring while the original RingCT suffers a linear growth with the number of groups, which would allow each block to process more transactions.

Available format(s)
Publication info
Published elsewhere. Minor revision. Published in ESORICS 2017
Cryptographic CurrencyAnonymity
Contact author(s)
shifeng sun @ monash edu
csallen @ comp polyu edu hk
joseph liu @ monash edu
YUEN TSZ HON @ huawei com
dwgu @ sjtu edu cn
2017-09-24: received
Short URL
Creative Commons Attribution


      author = {Shi-Feng Sun and Man Ho Au and Joseph K.  Liu and Tsz Hon Yuen and Dawu Gu},
      title = {RingCT 2.0: A Compact Accumulator-Based (Linkable Ring Signature) Protocol for Blockchain Cryptocurrency Monero},
      howpublished = {Cryptology ePrint Archive, Paper 2017/921},
      year = {2017},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.