12:27:28 i'm trying to install the monero-gui package on Artix but i get "error: monero: signature from "kpcyrd is unknown trust" 12:39:26 lostpon: `pacman -S archlinux-keyring` 12:44:24 I mean, I don't know about Artix, but you seem to have an old key of mine in your keyring and you need to update the package that provides it 12:59:40 kpcyrd: thanks, Artix moved the package to another repo so it wasn't updated on my last update 12:59:57 added the new repo, updated the package, installed monero. thx 13:00:17 huh, interesting. glad it's working now tho. :) 17:09:37 hi ho! 17:10:40 hey... about Tx keys. I see private and public, but what happens if the private key is disclosed? 17:11:37 Transaction can't be reversed, they can't use it to create another payment, so... what evil could be done if 3rd party knows Tx private key? 17:22:17 Nomenclatura, they could spend your XMR 17:22:27 ohhh tx private 17:22:31 no 17:22:40 yeah tx 17:22:42 nvm... I know nothing 17:22:59 probably just tx details 17:23:23 With the tx private key, you can create an old style spend proof. 17:23:40 I think you can also tell which of the inputs are the real spends. Not 100% sure. 17:24:34 isn't private key the key that is used to spend outputs of that transaction? 17:24:52 the receiving side can calculate private key by using their wallet's private keys 17:25:20 Then you cannot tell which inputs are the real ones :) 17:25:39 Wait. No. 17:26:18 There's a Diffie Helman key exchange going there, the receiver does not recover the secert key I think. 17:26:39 Do you *think* they do, or do you *know* they do ? 17:27:27 ¯\_(ツ)_/¯ 17:27:28 https://www.getmonero.org/library/Zero-to-Monero-2-0-0.pdf 4.2 One-time addresses 17:27:40 info on that is meager, that's why I'm asking here. 17:27:55 To spend his ‘0’ amount output [sic] in a new transaction, all Bob needs to do is prove ownership by signing a message with the one-time key Ko. The private key ksB is the ‘spend key’ since it 17:27:55 is required for proving output ownership, while kvB is the ‘view key’ since it can be used to find outputs spendable by Bob. 17:28:39 Just for clarity, the output secret key is not the tx secret key. 17:29:30 The recipient uses its view sec key with the tx pub key to get... what the sender creates with the tx secret key and the recipient's view pubkey. To me, this implies the recipient cannot get the tx secret key back. 17:29:58 (otherwise, why do the dance) 17:30:16 But every transaction is unique so the private key is teh signature for that one transaction only not for ll transactions, right? 17:30:49 s/ll/all 17:30:57 The signature signs all the tx prefix, which includes the tx pub key. Not sure if that's what you're asking. Tx secret keys are randomly rolled per tx. 17:31:15 (and the tx pubkey is deterministically derived from the tx secret key) 17:31:53 Several txes can use the same tx secret key. In fact, it is likely some do on the current chain. 17:32:45 so it is like an ssk private key 17:33:13 and the public tx is like the hash of an specific connection 17:33:17 If you're using an ECC ssh key, I guess yes. 17:33:29 That second one lost me :D 17:34:24 mmm 17:35:15 but this is diffie hellman? 17:47:20 I think so. sec/pub vs pub/sec. Maybe not canonical, but that's the idea behind DH. 17:47:30 If the tx private key is like an ssh private key, then yes, it can be used to generate new keys, this is, new transactions and spend xmr in the address. 17:48:35 The output sec keys can be derived by the recipient, but not by the sender (thankfully). So that one's not a straight DH from the keys above. 17:49:05 But your questions are almost certainly answered in the PDF sech1 linked above. Which I really should read one day.. 17:49:10 cables for 3 and 4 should be underneath 1 and 2 cables chrono 17:49:14 oops 17:50:51 sech1: thanks man, I'll read that 17:51:13 moneromooo: it's all clear now =p 18:43:47 But, what you see as "tx private key" in transaction details refers to the private view key or the private spend key? 18:45:31 neither 18:45:51 private view key and private spend key belong to wallets, not to txns 18:46:11 a txn has already been spent, so what sense would it make for it to have a spend key? 18:48:05 right! 18:48:24 So, the Tx key in transaction details is the public key, ain't it? 18:49:18 Reason is I am checking https://monerohash.com 18:49:39 To prove a transaction it asks for "Tx private key" 18:50:22 That's the old style "proof". The new style is better, since it doesn't leak the tx secret key. 18:50:31 so, private for the transaction signature I would assume, but reading sech1 I understand that is either the private spend or private view 18:50:52 right, but I wat to understand what it is 18:51:11 It's almost certainly the secret tx kjey, which is different from hte secret spend key and the secret view key. and the secret output key. 18:51:47 The view/spend ones make up your address (or, rather their public counterparts do), 18:52:01 The tx pub key is per tx, rolled randonly by the spender. 18:52:05 'cause if that website asks for tx private key, then it could spend the addresses of everybody who checks it there 18:52:13 The output secret key is per output, derived by the recipient. 18:52:24 No, it can't. 18:53:57 right, so, tx private key is what is used to sign that transaction alone, not all transactions, therefore it cannot be used to either view or spend in stake of that address, right? 18:54:38 It doesn't sign the tx. Your spend secret key does. 18:54:39 If so, then why have a private/public key and not just a hash? 18:54:58 okay it makes no sense 18:55:03 Your spend, and possibly view, key does. 18:55:18 Zero to monero will explain the details if you wnat to know them. 18:56:21 oh I'm reading it 18:56:27 not a 5 min read tho 18:58:12 So, in short... If tx private key is neither private spend or private view key, and tx privake key is the unique private to generate the public, which is the spend, then there is no possible misuse of the private tx key since it is the private key for the transaction already spent 18:58:20 correcto? 19:00:05 You can confirm you have outputs in a transaction by using the tx private key, and the destination public address 19:00:56 For example in p2pool Coinbase tx private key is known for blocks mined, and as such every other node can verify payments were done proper 19:02:41 okay 19:02:56 Then why not a hash instead of a private/public? 19:02:56 For example for this random miner https://p2pool.observer/miner/44fVopMqBVzPaepLaA2WWbPmaVg3BsvP4XNcmC294cGy2xkw1RZnYUJ9f8MPwGN9ibG8zaYbBUvwN9AcW8Kn6SThSkZ8wWK 19:03:07 last payout proof goes to https://p2pool.observer/p/EJKT/Ox 19:03:32 With tx private key 42fc2a92317fd6fe907297bb5d248bcb717269536df6d6620b061fb012c6ec0e 19:04:19 That way you can verify the miner provided a proper payout in the transaction that mined the block https://p2pool.observer/share/4e8526216ab909aa8dbb6d12973812a4da9cdb99e168826723cef30a32fbd2c6 19:04:23 thinking_face.gif 19:05:02 Basically you can recreate the calculation to generate the ephemeral public key if you have the tx private key 19:05:09 oooooh I see 19:05:10 and the destination address 19:05:30 if ephemeral public key on output index equals what you have calculated, that output is yours 19:05:31 So you can use it to prove several outputs for the same address 19:05:47 Or prove outputs for many addresses 19:06:12 So, the only possible bad use is that having tx private key allows you to see what outputs that address has had 19:06:14 you need to know the destination address you want to test against, however, and the tx private key 19:06:23 yes 19:06:32 * Nomenclatura gets it now 19:06:39 thank you!