Auditing incoming transactions in Monero

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
1
down vote

favorite












It is said that a view key can expose incoming transactions.

1. Is the view key enough to prove ownership of an incoming transaction?
The stealth address is calculated with
H(Ra)G + B, so I guess the public spend key must also be given?

2. Can sharing the view key also expose the incoming amounts? Aren't they all blinded with external blinding (mask) factors, so the view key will not be enough?










share|improve this question



























    up vote
    1
    down vote

    favorite












    It is said that a view key can expose incoming transactions.

    1. Is the view key enough to prove ownership of an incoming transaction?
    The stealth address is calculated with
    H(Ra)G + B, so I guess the public spend key must also be given?

    2. Can sharing the view key also expose the incoming amounts? Aren't they all blinded with external blinding (mask) factors, so the view key will not be enough?










    share|improve this question

























      up vote
      1
      down vote

      favorite









      up vote
      1
      down vote

      favorite











      It is said that a view key can expose incoming transactions.

      1. Is the view key enough to prove ownership of an incoming transaction?
      The stealth address is calculated with
      H(Ra)G + B, so I guess the public spend key must also be given?

      2. Can sharing the view key also expose the incoming amounts? Aren't they all blinded with external blinding (mask) factors, so the view key will not be enough?










      share|improve this question















      It is said that a view key can expose incoming transactions.

      1. Is the view key enough to prove ownership of an incoming transaction?
      The stealth address is calculated with
      H(Ra)G + B, so I guess the public spend key must also be given?

      2. Can sharing the view key also expose the incoming amounts? Aren't they all blinded with external blinding (mask) factors, so the view key will not be enough?







      viewkey stealth-address auditing






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited 40 mins ago









      knaccc

      5,193415




      5,193415










      asked 1 hour ago









      oleiba

      355




      355




















          1 Answer
          1






          active

          oldest

          votes

















          up vote
          2
          down vote



          accepted










          1. Yes, the view key proves that outputs were destined for a particular wallet address. It cannot be proven whether these outputs were subsequently spent, but it can be guessed that they have been spent if the outputs are referenced in a transaction that creates a change output that is also destined for that same wallet (which someone with the private view key would be able to detect).


          2. Yes, because both the output amounts and the blinding factors are encrypted using the shared secret H(aR) and included as part of the transaction data.






          share|improve this answer




















            Your Answer







            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "656"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            convertImagesToLinks: false,
            noModals: false,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: null,
            bindNavPrevention: true,
            postfix: "",
            noCode: true, onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













             

            draft saved


            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmonero.stackexchange.com%2fquestions%2f10294%2fauditing-incoming-transactions-in-monero%23new-answer', 'question_page');

            );

            Post as a guest






























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            2
            down vote



            accepted










            1. Yes, the view key proves that outputs were destined for a particular wallet address. It cannot be proven whether these outputs were subsequently spent, but it can be guessed that they have been spent if the outputs are referenced in a transaction that creates a change output that is also destined for that same wallet (which someone with the private view key would be able to detect).


            2. Yes, because both the output amounts and the blinding factors are encrypted using the shared secret H(aR) and included as part of the transaction data.






            share|improve this answer
























              up vote
              2
              down vote



              accepted










              1. Yes, the view key proves that outputs were destined for a particular wallet address. It cannot be proven whether these outputs were subsequently spent, but it can be guessed that they have been spent if the outputs are referenced in a transaction that creates a change output that is also destined for that same wallet (which someone with the private view key would be able to detect).


              2. Yes, because both the output amounts and the blinding factors are encrypted using the shared secret H(aR) and included as part of the transaction data.






              share|improve this answer






















                up vote
                2
                down vote



                accepted







                up vote
                2
                down vote



                accepted






                1. Yes, the view key proves that outputs were destined for a particular wallet address. It cannot be proven whether these outputs were subsequently spent, but it can be guessed that they have been spent if the outputs are referenced in a transaction that creates a change output that is also destined for that same wallet (which someone with the private view key would be able to detect).


                2. Yes, because both the output amounts and the blinding factors are encrypted using the shared secret H(aR) and included as part of the transaction data.






                share|improve this answer












                1. Yes, the view key proves that outputs were destined for a particular wallet address. It cannot be proven whether these outputs were subsequently spent, but it can be guessed that they have been spent if the outputs are referenced in a transaction that creates a change output that is also destined for that same wallet (which someone with the private view key would be able to detect).


                2. Yes, because both the output amounts and the blinding factors are encrypted using the shared secret H(aR) and included as part of the transaction data.







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered 43 mins ago









                knaccc

                5,193415




                5,193415



























                     

                    draft saved


                    draft discarded















































                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmonero.stackexchange.com%2fquestions%2f10294%2fauditing-incoming-transactions-in-monero%23new-answer', 'question_page');

                    );

                    Post as a guest













































































                    Comments

                    Popular posts from this blog

                    Is the Concept of Multiple Fantasy Races Scientifically Flawed? [closed]

                    Long meetings (6-7 hours a day): Being “babysat” by supervisor

                    Confectionery