Cited by 339Cryptography and Data SecurityBlockchain Technology Applications and SecurityAdvanced Authentication Protocols Security

Ring Confidential Transactions

Open access
Noether, Shen, Mackenzie, Adam, Research Lab, The Monero·2016·Ledger

Abstract

This article introduces a method of hiding transaction amounts in the strongly decentralized anonymous cryptocurrency Monero. Similar to Bitcoin, Monero is a cryptocurrency which is distributed through a proof-of-work “mining” process having no central party or trusted setup. The original Monero protocol was based on CryptoNote, which uses ring signatures and one-time keys to hide the destination and origin of transactions. Recently the technique of using a commitment scheme to hide the amount of a transaction has been discussed and implemented by Bitcoin Core developer Gregory Maxwell. In this article, a new type of ring signature, A Multilayered Linkable Spontaneous Anonymous Group signature is described which allows one to include a Pedersen Commitment in a ring signature. This construction results in a digital currency with hidden amounts, origins and destinations of transactions with reasonable efficiency and verifiable, trustless coin generation. The author would like to note that early drafts of this were publicized in the Monero Community and on the #bitcoin-wizards IRC channel. Blockchain hashed drafts are available showing that this work was started in Summer 2015, and completed in early October 2015. An eprint is also available at http://eprint.iacr.org/2015/1098.

Integrity signals

Registry

Crossref · 10.5195/ledger.2016.34

Cites

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Mixing protocols such as CoinJoin, Ring Signature blockchains like Monero, and Zero-Knowledge blockchains like Zerocoin all hinder the token's history, making the owner's addresses uncorrelatable by hiding them in a set of possible owners.

    “Mixing protocols such as CoinJoin [70], Ring Signature blockchains like Monero [72] and Zero-Knowledge blockchains like Zerocoin [16], all hinder the token's history, making the owner's addresses uncorrelatable by hiding them in a set of possible owners.”

Cited by

Sorted by citations

Authors
Noether, S., Mackenzie, A., & Research Lab, T. M.
Venue
Ledger
Published
2016-12-21
Volume
1
Pages
1-18
ISSN
2379-5980 (ISSN-L)
OpenAlex
W2565287832
Cited by
339
References
0
Citations by year
2026: 24 · 2025: 43 · 2024: 34 · 2023: 39 · 2022: 39 · 2021: 46 · 2020: 43 · 2019: 41 · 2018: 23 · 2017: 7
FWCI
19.50
Type
journal article
Language
en
Open access
Locations
  • Ledger (publishedVersion, cc-by)
  • DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
  • Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
  • Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
Keywords
Monero, ring signatures, confidential transactions, Pedersen commitments, cryptocurrency anonymity, one-time key, decentralized digital currency

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review