The monero from kenshi84

View Code? Open in Web Editor NEW

Monero: the secure, private, untraceable cryptocurrency

License: Other

CMake 2.03% Makefile 0.11% C 13.66% C++ 83.39% Objective-C 0.06% Shell 0.30% Batchfile 0.03% Python 0.27% Perl 0.04% Perl 6 0.11%

monero's People

Contributors

View secret key: a
Spend secret key: b
Spend public key of the j-th address of the i-th account: D = B + Hs(Hs(b) || i)*G + Hs(Hs(Hs(Hs(b) || i)) || j)*G
View public key: C = a*D

Secret for generating accounts: x = Hs(b)
Partial spend secret key for the i-th account: m = Hs(x || i)
Secret for generating subaddresses specific to the i-th account: y = Hs(m)
Partial spend secret key for the j-th address of the i-th account: n = Hs(y || j)
Spend public key of the j-th address of the i-th account: D = B + m*G + n*G

Bob owns the wallet (i.e. the spend secret key b)
Bob can grant access to his i-th account to Charlie by giving him (a, e, y) where e = b + m
- Charlie can't tell b because he doesn't know x=Hs(b) and thus cannot compute m
- Charlie can derive the spend secret key of that account's j-th address as: d = e + n
Bob can grant access to a specific subaddress at index (i,j) by giving Charlie (a,d)
- Charlie can send his change to the same address (C,D)

A full view-only wallet: (a, B, x)
- It can generate all the spend public keys with index (i,j) as: D = B + m*G + n*G
A view-only wallet restricted to the i-th account: (a, E, y)
- It can generate all the spend public keys with minor index j as: D = E + n*G
A view-only wallet restricted to a specific subaddress: (a,D) where D is the spend public key of some of the subaddresses.

Recommend Projects