← Back to team overview

mimblewimble team mailing list archive

Re: "Pay-to-Address" / "Pay-to-Public-Key": Non-Interactive Transaction Solution for Mimblewimble

 

dear Gary,

> 5. Alice calculates (q*P) and attach it to the transaction kernel as the restriction to spend its PTXO. ONLY who owns the private key of this public (q*P) can spend this PTXO.

> To summarize the difference of the transaction kernel between ITX and PTX, PTX has 3 additional fields which ITX doesn’t have:
> - (q*P): 33 bytes
> - v': 8 bytes
> - even/odd of R.y: 1 bit

In MW, after tx aggregation, there is no more visible relation between
the PTX kernel and output.
So how does your scheme prevent Alice from spending the output?

regards,
-John


Follow ups

References