Ok I'm not sure about "image key". I red somewhere it is derived from private key (so only me can verify because only I know private ) ... But in this paper "image key" is derived from pubic key. Does it mean I can use VER/LINK to find out who is really spending ?
This is a TA thread - if you're struggling to grasp the cryptography then you are welcome to continue this discussion in the Monero ANN thread:
https://bitcointalksearch.org/topic/xmr-monero-a-secure-private-untraceable-cryptocurrency-583449Alternatively, if you believe you've found an exploit, I do encourage you (again) to document it and write a PoC like every other security researcher. The process of writing a PoC normally forces me to come to grips with the intricacies of the subject, and I document thereafter.
Rem tene verba sequentur, as they used to say.
Is that "image key" public observable ? Every node knows what input is really spent and who ring-sing this message ?
I don't see the term "image key" anywhere, so I'm not sure what that means. Maybe I missed it?
Edit:
If I know YOUR public key, from an unspet input . You are broadcasting new transaction (is not yet minted). I can compute "image key" and create ring-sing of YOUR input with my privateKey ...
If you mean key image, you can't create that from a public key, only a private key.
>If you mean key image, you can't create that from a public key, only a private key.
whitepaper page 9. GEN: says. You generate it as some hash of public key. If you generate it from private key then no one can verify it is true. (they must trust you)
> I don't see the term "image key" anywhere, so I'm not sure what that means. Maybe I missed it?
You told me that this "image key" is required for VER and LNK to prevent double spending
a) it is public
b) it can be computed from public key (I'll try all public keys)