Are RingCT signatures malleable?

Question

Can a RingCT signature of a transaction be slightly modified to create an equivalent transaction (same inputs, same outputs) with a different transaction id?

score 9 · Accepted Answer · edited Oct 30 '16 at 16:43

9

The transaction ID is based on the hash of everything in the transaction, and the MLSAGs sign everything in the transaction except the MLSAGs themselves.

Therefore, changing anything in the transaction will change the tx hash and thus the ID.

edited Oct 30 '16 at 16:43

JVP

107
1
11

answered Oct 15 '16 at 15:59

user36303

34,928
2
58
123

Are RingCT signatures malleable?

1 Answers1

Linked