Jump to content

Monero

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by 219.88.239.219 (talk) at 07:01, 15 January 2017 (→‎Limitations). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Monero
Monero Logo
ISO 4217
Unit
PluralMonero, moneroj
Symbolɱ
Demographics
Date of introduction18 April 2014; 10 years ago (2014-04-18)
User(s)Worldwide
Valuation
InflationSlowly decreasing block reward that levels out at a minimum of 157788 XMR annually. This is less than 1% annual inflation, tending towards 0%.
  1. ^ Unofficial.

Monero (XMR) is an open-source cryptocurrency created in April 2014 that focuses on privacy, decentralisation and scalability. Unlike many cryptocurrencies that are derivatives of Bitcoin, Monero is based on the CryptoNote protocol and possesses significant algorithmic differences relating to blockchain obfuscation.[1] Monero has ongoing support from the community,[2] and its modular code architecture has been praised by Wladimir J. van der Laan, a Bitcoin Core maintainer.[3] Initially meeting little popularity with the general public, Monero experienced rapid growth in market capitalization (from US$5M to US$185M)[4] and transaction volume[5] during the year 2016, partly due to adoption by major darknet market AlphaBay at the end of summer 2016.[6]

History

Monero was launched on 18 April 2014 originally under the name BitMonero, which is a compound of Bit (as in Bitcoin) and Monero (literally meaning coin in Esperanto). Five days later the community opted for the name to be shortened just to Monero. It was launched as the first fork of CryptoNote-based currency Bytecoin, however was released with two major differences. Firstly, the target block time was decreased from 120 to 60 seconds, and secondly, the emission speed was decelerated by 50% (later Monero reverted to 120 seconds block time while keeping the emission schedule by doubling the block reward per new block). In addition, the Monero developers found numerous incidents of poor quality code that was subsequently cleaned and re-constituted.[citation needed]

A few weeks after launch, an optimized GPU miner for CryptoNight proof-of-work function was developed.[7]

On 4 September 2014, Monero recovered from an unusual and novel attack executed against the cryptocurrency network.[8]

On 10 January 2017, Monero transactions privacy strengthened on the main chain with the optional application of Bitcoin core developer Gregory Maxwell's algorithm Ring Confidential Transactions, starting at block #1220516.[9][10][11] Before, transactions were simply obfuscated through confusion. This algorithm introduces an additional layer of confidentiality by not displaying the amounts implicated in a transaction to someone who did not directly take part in it.

Features

File:Monero coin supply and inflation over time.png
Monero coin supply and inflation over time.

Monero is an open-source pure proof-of-work cryptocurrency. It runs on Windows, Mac, Linux and FreeBSD.[12]

Its main emission curve will issue about 18.4 Million coins to be mined in approximately 8 years.[13][14] (more precisely 18.132 Million coins by ca. end of May 2022[15][16]) After that, a constant "tail emission" of 0.6 XMR per 2-minutes block (modified from initially equivalent 0.3 XMR per 1-minute block) will create a sub-1% perpetual inflation (more precisely [see ref. above] starting with 0.87% yearly inflation around May 2022) to prevent the lack of incentives for miners once a currency is not mineable anymore.[17] The emission uses a smoothly decreasing reward with no block halving (any block generates a bit less monero than the previous one, formula: Emission per 2-minutes block = max(0.6, floor((M − A)×2−19)×10−12) XMR, with M = 264 − 1 and A = 1012 times the amount of XMR already emitted). The smallest resolvable currency unit is 10−12 XMR. The proof-of-work algorithm, CryptoNight, is AES-intensive and "memory heavy", which significantly reduces the advantage of GPU over CPU.

Privacy

The changes in the results of blockchain analysis after implementing the ring signatures.

Monero daemon uses the original CryptoNote protocol except for the initial changes (as the block time and emission speed). The protocol itself is based on "one-time ring signatures"[18] and stealth addresses. Underlying cryptography is essentially Daniel J. Bernstein's library for Ed25519, which is Schnorr signatures on the Twisted Edwards curve. The end result is passive, decentralised mixing based on heavily-tested algorithms.[19]

However, several improvements were suggested by Monero Research Labs (a group of people, including core developers team), which covered the proper use of ring signatures for better privacy.[20] Specifically, the proposals included "a protocol-level network-wide minimum mix-in policy of n = 2 foreign outputs per ring signature", "a nonuniform transaction output selection method for ring generation" and "a torrent-style method of sending Monero output".[21] These changes, which were implemented in version 0.9.0 "Hydrogen Helix",[22] can help protect user's privacy in a CryptoNote-based currency according to the authors.

As a consequence, Monero features an opaque blockchain (with an explicit allowance system called the viewkey), in sharp contrast with transparent blockchain used by any other cryptocurrency not based on CryptoNote. Thus, Monero is said to be "private, optionally transparent". On top of very strong privacy by default, such a system permits net neutrality on the blockchain (miners cannot become censors, since they do not know where the transaction goes or what it contains) while still permitting auditing when desired (for instance, tax audit or public display of the finances of an NGO).[23] Furthermore, Monero is considered by many to offer truly fungible coins.[24][25][26]

Monero developers are also working on implementing a C++ I2P router straight in the code. This would complete the privacy chain by also hiding the IP addresses.[27]

Decentralisation

"Monero is powered strictly by Proof of Work, but specifically, it employs a mining algorithm that has the potential to be efficiently tasked to billions of existing devices (any modern x86 CPU)."[28] Monero uses the CryptoNight Proof of Work (PoW) algorithm, which is designed for use in ordinary CPUs.[29]

The smart mining forthcoming feature will allow transparent CPU mining on the user's computer, far from the de facto centralization of mining farms and pool mining, pursuing Satoshi Nakamoto's original vision of a true P2P currency.[30]

Scalability

Monero has no hardcoded limit, which means it doesn't have a 1 MB block size limitation preventing scalability. However, a block reward penalty mechanism is built into the protocol to avoid a too excessive block size increase: The new block's size NBS is compared to the median size M100 of the last 100 blocks. If NBS>M100, the block reward gets reduced in quadratic dependency of how much NBS exceeds M100. E.g. if NBS is [10%, 50%, 80%, 100%] greater than M100, the nominal block reward gets reduced by [1%, 25%, 64%, 100%]. Generally, blocks greater than 2*M100 are not allowed, and blocks <= 60kB are always free of any block reward penalties.

The Monero Core Team also released a standard called OpenAlias,[31] which permits much more human-readable addresses and "squares" the Zooko's triangle. OpenAlias can be used for any cryptocurrency and is already implemented in Monero, Bitcoin (in latest Electrum versions) and HyperStake.

Usage

XMR.TO allows to make payments to any Bitcoin address with the strong privacy provided by Monero.[32]

Limitations

Since it is not based on Bitcoin, Monero cannot take advantage of the Bitcoin technological ecosystem, like the stock BitcoinQT GUI wallet or larger payment processors such as Bitpay. However, there is a similar project in development by core developer Riccardo Spagni, known as PayBee. As a consequence, everything has to be written from scratch.[33] Presently (as of March 2015), Monero doesn't have feature parity with Bitcoin. Notably, there is no support to multisignature and no official Monero payment processor (but in April 2015 it was announced on bitcointalk.org one is in the works by a member of The Monero Core Team).

Monero transactions take up more space on the blockchain than Bitcoin transactions, and transactions will be even larger with RingCT added.[34] This makes it more expensive to run a full node.

Ongoing work and side projects

  • RingCT: a way to implement confidential transactions in Monero. Confidential transactions (CT) is a proposed method for hiding the value of transactions in Bitcoin.[35]
  • OpenAlias: an extensive aliasing blockchain-based system;[36]
  • Kovri: a privacy solution for integrating I2P in Monero;[37]
  • URS: the proof-of-concept of an anonymous voting system, based on ring signatures;
  • 0MQ: a C API library used by clients to connect to the Monero daemon service.[38]
  • Electrum's mnemonic seeds for deterministic -key creation in webwallet;[39]
  • The Monero Core Team continues to depart from the original Bytecoin code with numerous patches and improvements to its implementation of the CryptoNote protocol.[40]

Applications

CryptoKingdom is a MMORPG that uses Monero for entry into its economy.[41]

MoneroDice is a dice gambling game that uses cryptography for provably fair randomness.[42]

See also

References

  1. ^ "Nope. You are confused. You should consider this great news because you are abou... | Hacker News". news.ycombinator.com. Retrieved 2015-10-04.
  2. ^ "Monero (XMR) CoinGecko Community Statistics". www.coingecko.com. Retrieved 29 September 2015.
  3. ^ "Wladimir J. van der Laan". http://bitcoin-development.narkive.com/. Retrieved 29 September 2015. {{cite web}}: External link in |website= (help)
  4. ^ "Monero (XMR) Market Capitalization". www.coinmarketcap.com. Retrieved 5 September 2016.
  5. ^ http://monerostats.com/charts/?type=transactions
  6. ^ Aliens, C. (23 August 2016). "AlphaBay and Oasis Markets to Begin Accepting Monero for Payments".
  7. ^ Andersen, David. "Minting Money with Monero ... and CPU vector intrinsics". da-data.blogspot.ru. Retrieved 30 March 2015.
  8. ^ Macheta, Jan; Noether, Surae; Noether, Sarang; Smooth, Javier. "Counterfeiting via Merkle Tree Exploits within Virtual Currencies Employing the CryptoNote Protocol" (PDF). getmonero.org. Retrieved 4 April 2015.
  9. ^ https://lab.getmonero.org/pubs/MRL-0005.pdf
  10. ^ "monero-project/monero". GitHub. Retrieved 2017-01-10.
  11. ^ "blox.supportXMR.com". explore.moneroworld.com. Retrieved 2017-01-10.
  12. ^ Latapie, David. "What's so special about Monero". Getmonero.org. Retrieved 19 March 2015.
  13. ^ "Monero Economy". bitcointa.lk. Archived from the original on March 7, 2016. Retrieved 4 April 2015. {{cite web}}: Unknown parameter |deadurl= ignored (|url-status= suggested) (help)
  14. ^ "Bitcoin and Monero – Comparison of Money Supply and Block Reward". imgur.com. Retrieved 4 September 2016.
  15. ^ "Reddit – What are the basic parameters/characteristics of Monero – Answer by XMR Core Team Member". reddit.com. Retrieved 4 Sep 2016.
  16. ^ "Reddit – Useful For Learning About Monero: Coin Emission And Block Reward Schedules: Bitcoin vs. Monero, all at a glance!". reddit.com. Retrieved 4 Sep 2016.
  17. ^ Hutchinson, Martin. "Breakingviews: Bitcoin's defects will hasten its demise in 2015". reuters.com. Retrieved 19 March 2015.
  18. ^ Saberhagen, Nicolas. "CryptoNote" (PDF). cryptonote.org. Retrieved 5 October 2015.
  19. ^ Spagni, Riccardo. "Alright devs, own up: what's the deal with "magic" block 202612?". Reddit. Retrieved 29 March 2015. Based on our current level of technology and our current understanding of cryptography there is no vulnerability in ring signatures, not in theory nor in our implementation (which is mostly based on old, exceedingly well-tested cryptography and code from SUPERCOP / libsodium / NaCL). The cryptography is directly based on work that is nearly 10 years old, which in turn is grounded in cryptography in a paper from 1991, so we're talking about something that has already been analysed by very gifted cryptographers.
  20. ^ "Monero Research Labs". getmonero.org. Monero. Retrieved 31 March 2015.
  21. ^ Mackenzie, Adam; Noether, Surae; Monero Core Team. "Improving Obfuscation in the CryptoNote Protocol" (PDF). getmonero.org. Retrieved 31 March 2015.
  22. ^ https://getmonero.org/2016/01/01/monero-0.9.0-hydrogen-helix-released.html
  23. ^ Latapie, David. "March FinTech Open Mic Night – Monero". youtube.com. Retrieved 4 April 2015.
  24. ^ "Monero is not an Altcoin – The arrival of fungible digital money". steemit.com. Retrieved 3 September 2016.
  25. ^ "On Fungibility, Bitcoin, Monero and why ZCash is a bad idea". weuse.cash. Retrieved 3 September 2016.
  26. ^ "About Monero". getmonero.org. Retrieved 3 September 2016.
  27. ^ Latapie, David. "Why we chose i2p over TOR". getmonero.org. Retrieved 19 March 2015.
  28. ^ "About Monero". getmonero.org. Retrieved 3 September 2016.
  29. ^ "CryptoNight". Bitcoin Wiki. Retrieved 3 September 2016.
  30. ^ "Bitcoin whitepaper". Bitcoin Wiki. Retrieved 5 April 2015.
  31. ^ "OpenAlias official website". openalias.org. Retrieved 19 March 2015.
  32. ^ "What is XMR.TO?". xmr.to. Retrieved 5 April 2015.
  33. ^ Latapie, David. "Why is the official GUI wallet not released yet". getmonero.org. Retrieved 19 March 2015.
  34. ^ "How much larger are Monero transactions compared to the average Bitcoin transaction?". stackexchange.com. Retrieved 4 September 2016.
  35. ^ http://eprint.iacr.org/eprint-bin/getfile.pl?entry=2015/1098&version=20151217:200440&file=1098.pdf
  36. ^ "OpenAlias official website". getmonero.org. Retrieved 30 March 2015.
  37. ^ "The-Privacy Solutions Project". geti2p.net. Retrieved 30 March 2015.
  38. ^ "0MQ GitHub". github.com. Retrieved 3 September 2016.
  39. ^ "MyMonero". mymonero.com. Retrieved 30 March 2015.
  40. ^ "Github – monero-project". github.com. Retrieved 4 April 2015.
  41. ^ https://cryptokingdom.me
  42. ^ https://monerodice.net/