How could an inflation bug be spotted in grin?

2

Looking at the transactions within the block explorer I can't see any transaction amounts. How could an inflation bug be detected if all transactions are private?

Rene Pickhardt

Posted 2019-01-17T18:37:50.327

Reputation: 6 565

Answers

2

Range proofs for CTs demonstrate that output amounts are positive and within an allowable range, and that no inflation is occuring in a non-coinbase transaction.

The range proofs (eg bulletproofs) are computationally binding.

If the discrete log is broken, range proofs can be generated for values outside the correct range without any way to detect this. This includes correctly validating proofs for a tx with inflation.

James C.

Posted 2019-01-17T18:37:50.327

Reputation: 2 183

CTs necessarily obscure all transaction amounts.James C. 2019-01-17T20:00:47.720

CT= ? and I guess the coinbase transactions would be protected otherwise? Also How do range proofs work? (I guess I will google this)Rene Pickhardt 2019-01-17T22:15:58.030

1

Confidential transactions. Inflation schedule is known. This is the best explanation for bulletproofs from Adam Gibson: https://raw.githubusercontent.com/AdamISZ/from0k2bp/master/from0k2bp.pdf

James C. 2019-01-17T22:22:07.007