Zero to Monero: a technical guide to a private digital currency; for beginners, amateurs, and experts

Description

LaTeX Source https://github.com/UkoeHB/Monero-RCT-report # Zero-to-Monero This is a comprehensive conceptual (and technical) explanation of Monero. I will be updating periodically, and publishing full editions when they are complete. The first and second editions were published on getmonero.org in the Library section: https://web.getmonero.org/library/ *Checksums* To calculate a checksum, open the terminal/command line and navigate into the folder containing the file you wish to check. Type 'shasum -a 256 file_name'. First Edition checksum: 8e235da06fd96fe84701c3812ad47599985c0b72fe05ddd6e4af3c2f573ab28c Zero-to-Monero-1-0-0.pdf Second Edition checksum: a784a342141a6c237bdc1ef1c227e6865fae08b2a1b5f10aa4a47af01929a55a Zero-to-Monero-2-0-0.pdf *Translations* ZtM is written in LaTeX, so it is not easily integrated with translation services like transifex. The unwieldy solution is to make new Github repositories for translation projects, which contributors can submit pull requests to. 1. Fork this repository. Tell me the name/link of your repository (can email me at [email protected], or make an Issue on this repository), and what language you are aiming at. I will update this README with your information, so other translators can find your work. 2. Copy the original LaTeX files into a new folder under translations/your_language_folder/source-files-to-translate. 3. Edit those files as you see fit. A service like Overleaf can let you build the document, just make a new Overleaf project -> 'upload project' and select the folder containing all the source files (e.g. clone the Github repo and open your_language_folder in Overleaf). A lot of math and formatting is imbedded in text, so be careful with what you change. Rebuilding with Overleaf lets you see the effect of changes on typesetting and so on. 4. Once you are done editing a file, make a pull request on the translation repo with your changes. Easiest may be to open the relevant file, 'edit' it, and paste in the contents of your personal file containing changes. 5. After the document is done being translated, either make a pull request on my repository here, or let me know and I will pull it in. Completed translations: -English (original) Current translations in progress: -(none that I know) *License* This repository is public domain. Introduction Objectives Readership Origins of the Monero cryptocurrency Outline Part 1: `Essentials' Part 2: `Extensions' Additional content Disclaimer History of Zero to Monero Acknowledgements I Essentials Basic Concepts A few words about notation Modular arithmetic Modular addition and multiplication Modular exponentiation Modular multiplicative inverse Modular equations Elliptic curve cryptography What are elliptic curves? Public key cryptography with elliptic curves Diffie-Hellman key exchange with elliptic curves Schnorr signatures and the Fiat-Shamir transform Signing messages Curve Ed25519 Binary representation Point compression EdDSA signature algorithm Binary operator XOR Advanced Schnorr-like Signatures Prove knowledge of a discrete logarithm across multiple bases Multiple private keys in one proof Spontaneous Anonymous Group (SAG) signatures Back's Linkable Spontaneous Anonymous Group (bLSAG) signatures Multilayer Linkable Spontaneous Anonymous Group (MLSAG) signatures Concise Linkable Spontaneous Anonymous Group (CLSAG) signatures Monero Addresses User keys One-time addresses Multi-output transactions Subaddresses Sending to a subaddress Integrated addresses Multisignature addresses Monero Amount Hiding Commitments Pedersen commitments Amount commitments RingCT introduction Range proofs Monero Ring Confidential Transactions (RingCT) Transaction types Ring Confidential Transactions of type RCTTypeBulletproof2 Amount commitments and transaction fees Signature Avoiding double-spending Space requirements Concept summary: Monero transactions Storage requirements The Monero Blockchain Digital currency Distributed/shared version of events Simple blockchain Difficulty Mining a block Mining speed Consensus: largest cumulative difficulty Mining in Monero Money supply Block reward Dynamic block weight Block reward penalty Dynamic minimum fee Emission tail Miner transaction: RCTTypeNull Blockchain structure Transaction ID Merkle tree Blocks II Extensions Monero Transaction-Related Knowledge Proofs Transaction proofs in Monero Multi-base Monero transaction proofs Prove creation of a transaction input (SpendProofV1) Prove creation of a transaction output (OutProofV2) Prove ownership of an output (InProofV2) Prove an owned output was not spent in a transaction (UnspentProof) Prove an address has a minimum unspent balance (ReserveProofV2) Monero audit framework Prove an address and subaddress correspond (SubaddressProof) The audit framework Multisignatures in Monero Communicating with co-signers Key aggregation for addresses Naive approach Drawbacks to the naive approach Robust key aggregation Thresholded Schnorr-like signatures MLSTAG Ring Confidential signatures for Monero RCTTypeBulletproof2 with N-of-N multisig Simplified communication Recalculating key images Smaller thresholds 1-of-N key aggregation (N-1)-of-N key aggregation M-of-N key aggregation Key families Family trees Nesting multisig keys Implications for Monero Monero in an Escrowed Marketplace Essential features Purchasing workflow Seamless Monero multisig Basics of a multisig interaction Escrowed user experience Joint Monero Transactions (TxTangle) Building joint transactions n-way communication channel Message rounds to construct a joint transaction Weaknesses Hosted TxTangle Basic communication with a host over I2P, and other features Host as a service Using a trusted dealer Dealer-based procedure Bibliography Appendices RCTTypeBulletproof2 Transaction Structure Block Content Genesis Block