Hot answers tagged

13 votes
Accepted

Why are the 50% I reveal when signing random?

Sample how one-time signature works Perhaps it helps with a short sample. Assume we are in a world where you do not need 384-bit security, but only 8-bit security (to make the example shorter). And I'...
user avatar
  • 7,254
7 votes
Accepted

Can one send a zero value transaction from any address to any address?

Technically speaking, a zero value transaction (bundle) neither needs to have nor can have a sender address. (Sending transactions in a bundle have value < 0 and receiving transactions have value ≥ ...
user avatar
  • 7,254
6 votes
Accepted

How is ensured that a message sent in a transaction is immutable?

Short answer: it is not. Long answer: Signatures are not supposed to protect anything else than the iota values and (obsolete)tag fields. Therefore, as long as your transaction is not confirmed, ...
user avatar
  • 7,254
5 votes
Accepted

How does the coordinator sign milestones without compromising the private key?

The answer, it seems, is merkle trees. There is a huge set of pre-generated keys using a merkle tree, and the milestone index is used to traverse the tree. Original answer found here: https://www....
user avatar
5 votes
Accepted

Which parts of a bundle have to be signed?

A signature may even need more than two transactions, e. g. if it is a multisig signature. Yes, the reason is that Winternitz signatures are large (for every tryte you are signing and each key that ...
user avatar
  • 7,254
4 votes

Why does IOTA use a post-quantum signature scheme?

While it's true that many of IOTA design choices were made with IoT devices in mind, it's important to note that being future proof is also a very important feature of the project. Admittedly, many ...
user avatar
  • 241
3 votes

Attach to Tangle Transaction

The transaction that is done when "attaching to tangle" doesn't have a sender address. It's just one address—the new address—in that transaction. The action just adds an address connected to your seed ...
user avatar
  • 1,293
3 votes

How is ensured that a message sent in a transaction is immutable?

It's not included in the bundle hash, but it is included in the transaction hash. If you look into how MAM does it, the message fragment contains the message, signature, and sibling hashes( for merkle ...
user avatar
  • 316
3 votes
Accepted

IOTA Winternitz Signature Scheme Details

All hashes in the signing function use Kerl. We start from an 81 tryte subseed that is generated by taking Kerl(seed + index). This will make the subseed sufficiently independent so that it is ...
user avatar
2 votes

How is Tangle Quantum Immune?

IOTA is what we call 'quantum robust' because of the signature scheme that it uses. You can find detailed information about signatures on our documentation portal.
user avatar
2 votes
Accepted

How can I make my Bluetooth enabled IOT device sign a transaction so that POW and everything else can be done by another device?

Yes, there is one: https://github.com/embedded-iota/iota-c-library You probably want to checkout the fork by francescolavra. He fixed a lot of issues and improved the library. If you want to use it ...
user avatar
  • 840
2 votes
Accepted

Adress reuse with zero value transactions

Zero value transactions don't need to be signed but you can sign them, either by mistake or by using a buggy library and in this case: it is unsafe to re-use the same address. I can't find the ...
user avatar
  • 5,344
1 vote

IOTA Multisig with one Signer

IOTA multisig transaction handling is done off-tangle, i. e. the transaction will be sent from one signer to the next without ever touching the tangle (and the tangle would reject bundles that don't ...
user avatar
  • 7,254
1 vote

Can one send a zero value transaction from any address to any address?

Yes, this is indeed the case. When you use a spammer to create transactions, they will always have a random address. MAM uses addresses as a message ID for example, as these data transfers are also ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible