%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %% I, the copyright holder of this work, release this work into the %% public domain. This applies worldwide. In some countries this may %% not be legally possible; if so: I grant anyone the right to use %% this work for any purpose, without any conditions, unless such %% conditions are required by law. %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% \documentclass[ printed, %% This option enables the default options for the %% digital version of a document. Replace with `printed` %% to enable the default options for the printed version %% of a document. table, %% Causes the coloring of tables. Replace with `notable` %% to restore plain tables. nolof, %% Prints the List of Figures. Replace with `nolof` to %% hide the List of Figures. nolot, %% Prints the List of Tables. Replace with `nolot` to %% hide the List of Tables. oneside, color %% More options are listed in the user guide at %% . ]{fithesis3} %% The following section sets up the locales used in the thesis. \usepackage[resetfonts]{cmap} %% We need to load the T2A font encoding \usepackage[T1,T2A]{fontenc} %% to use the Cyrillic fonts with Russian texts. \usepackage[ main=english, %% By using `czech` or `slovak` as the main locale %% instead of `english`, you can typeset the thesis %% in either Czech or Slovak, respectively. german, russian, czech, slovak %% The additional keys allow ]{babel} %% foreign texts to be typeset as follows: %% %% \begin{otherlanguage}{german} ... \end{otherlanguage} %% \begin{otherlanguage}{russian} ... \end{otherlanguage} %% \begin{otherlanguage}{czech} ... \end{otherlanguage} %% \begin{otherlanguage}{slovak} ... \end{otherlanguage} %% %% For non-Latin scripts, it may be necessary to load additional %% fonts: \usepackage{paratype} \def\textrussian#1{{\usefont{T2A}{PTSerif-TLF}{m}{rm}#1}} %% %% The following section sets up the metadata of the thesis. \thesissetup{ date = \the\year/\the\month/\the\day, university = mu, faculty = fi, type = mgr, author = Bc. Radim Lipovčan, gender = m, advisor = RNDr. Vlasta Šťavová, title = {Monero usage and mining from usable security view}, TeXtitle = {Monero usage and mining from usable security view}, keywords = {Monero, usable security, cryptocurrency, mining, pool, blockchain}, TeXkeywords = {Monero, usable security, cryptocurrency, mining, pool, blockchain}, } \thesislong{abstract}{ This is the abstract of my thesis, which can span multiple paragraphs. } \thesislong{thanks}{ This is the acknowledgement for my thesis, which can span multiple paragraphs. } %% The following section sets up the bibliography. \usepackage{csquotes} \usepackage[ %% When typesetting the bibliography, the backend=biber, %% `numeric` style will be used for the style=numeric, %% entries and the `numeric-comp` style citestyle=numeric-comp, %% for the references to the entries. The sorting=none, %% entries will be sorted in cite order. sortlocale=auto %% For more unformation about the available ]{biblatex} %% `style`s and `citestyles`, see: %% . \addbibresource{Thesis.bib} %% The bibliograpic database within %% the file `example.bib` will be used. \usepackage{makeidx} %% The `makeidx` package contains \makeindex %% helper commands for index typesetting. %% These additional packages are used within the document: \usepackage{paralist} \usepackage{amsmath} \usepackage{amsthm} \usepackage{amsfonts} \usepackage{url} \usepackage{menukeys} %packages \usepackage{float} \usepackage{hyperref} \usepackage[strings]{underscore} %timeline \usepackage{xcolor} \newcommand\ytl[2]{ \parbox[b]{8em}{\hfill{\color{cyan}\bfseries\sffamily #1}~$\cdots\cdots$~}\makebox[0pt][c]{$\bullet$}\vrule\quad \parbox[c]{.7\linewidth}{\vspace{7pt}\color{red!40!black!80}\raggedright\sffamily #2.\\[7pt]}\\[-3pt]} %caption \usepackage{caption} %branches \usepackage{tikz} % \usetikzlibrary{trees} \begin{document} \chapter{Introduction} %% Komentář Vlasta 10.7.: tady někde (možná samostatná kapitola) bude nutné nadefinovat pojmy. Nazvat to "Kryptoměny" a popsat tam myšlenku, z čeho se skládají, co je blockchain, co to znamená fork... a tak. %% Komentář Vlasta 10.7.: Nechceš to psát anglicky? Myslím, že by sis tím ušetřil hromadu práce s překlady. Dotazník bude v jakém jazyce? %% Komentář Radim 13.07: Kapitola s pojmy - udělám zvlášť krátkou, ve které popíšu tyto základní principy, ještě tedy před Monero Cryptocurrency kapitolou. Monero specific věci pak budou popsány už pod Monerem. %% Komentář Radim 13.07: Po domluvě mailem tedy začnu psát Anglicky. Dotazníky budou ve dvou jazykových mutacích - ENG a CZ. Hlavně kvůli CZ komunitě těžařů a pool operátorům - https://bohemianpool.com/#/home bych dal i tu češtinu. \chapter{Cryptocurrency} \textbf{Cryptocurrency} is a digital currency that is designed to use cryptography to secure and verify its transactions. Cryptocurrencies are decentralized as opposed to traditional money transaction systems used in the banks. Decentralisation is established by using distributed blockchain that functions as a transaction database within the currency. First cryptocurrency available was Bitcoin \cite{farell2015analysis}. \textbf{Altcoin} is a term used for every cryptocurrency that is not Bitcoin as it is a direct concurrent for the first of the cryptocurrency. The \textbf{fork} happens when developers create a copy of existing project codebase and start their individual path of development with it. \textbf{Market Cap} is a total value of cryptocurrency that refers to the total number of emitted coins multiplied by the value of the coin. \textbf{The blockchain} is a technology responsible for storing every transaction that has ever been processed in the cryptocurrency, also often called as a ledger. The main purpose of the blockchain is to ensure the validity of completed transactions. \textbf{Transactions} within cryptocurrency are processed together as blocks that are verified by miners and then added to the blockchain as a new mined block. \textbf{The wallet} is a storage medium that holds private and public keys by which user can access, send and receive funds. Wallet effectively does not have the coins but is rather a key to access them from the blockchain. \textbf{Node} is a computer connected to the cryptocurrency network. Node is often referred to as a full node which means that the computer maintains a full copy of blockchain. This results in node downloading every block and transaction and checking them against cryptocurrency rules, especially whether the transaction has correct signatures, data format and the right number of emitted coins per block. \textbf{Mining} process is done by miners that verifies transactions on the network and adds them to the blockchain together in form of a block which results in new coins being emitted as a reward for block solving. \textbf{Mining in pools} is the way how individual miners pool their computational resources. Due to resources pooling, there is a higher chance of solving the block thus gaining the reward of newly emitted coins. %After solving each block, the reward is distributed equally to miners connected to the pool according to PPS or PPLNS system. \chapter{Monero Cryptocurrency} %Monero je opensource kryptoměnou, která je vyvíjená v rámci Monero projektu za účelem vytvoření decentralizované a anonymní měny. Hlavním cílem je dát uživateli plnou kontrolu nad předstředky, kterými disponuje. Monero is an open-source cryptocurrency that is developed under the Monero project in order to create a decentralized and anonymous currency. Its main goal is to make the user the one who has complete control over own funds. %Znamná to tedy, že jednotlivé digitální transakce a počet peněz v pěněžence nelze dohledat bez vygenerování pohledu uživatelem \cite{moneroprojectgithub}.Hlavními body, kterými se Monero oproti jiným kryptoměnám liší, jsou: Meaning that every single digital transaction and the exact number of coins in users wallet cannot be traced back to the user without sharing the view key of the transaction \cite{moneroprojectgithub}. Main distinctive points compared to other cryptocurrencies are: %\begin{itemize}\itemsep0em %\item Blockchain je veřejný, většina jeho částí je ovšem šifrována, více v kapitole o blockchainu \ref{sec:blockchain}. %\item Odesílatel transakce je skrytý díky Ring Signatures, které jsou popsány v kapitole \ref{sec:ringsignatures}. %\item Množství odesílané měny je šifrováno pomocí RingCT popsaném v \ref{sec:ringct}. %\item Transakční historie a příjemce je neveřejný použitím skrytých adres (stealth addresses), kterým se věnuje kapitola \ref{sec:stealthaddresses}. %\end{itemize} \begin{itemize}\itemsep0em \item The blockchain is public, but a large part of it is encrypted. \item The sender of the transaction is hidden by using Ring Signatures explained in chapter \ref{sec:ringsignatures}. \item The exact amount of transferred coins is encrypted using RingCT as described in \ref{sec:ringct}. \item Transaction history and receiving party is hidden by the usage of stealth addresses that are referenced in chapter \ref{sec:stealthaddresses}. \end{itemize} \section{Origin and the main focus} Monero started its way by forking from Bytecoin, which was proof-of-concept cryptocurrency that used as first of its kind protocol called CryptoNote. CryptoNote was published by the start of the year 2014 \cite{githubbytecoin}. %Cesta vzniku samotného Monera je složená z několika forků a předcházejících projektů. Prvním z nich byl Bytecoin jakožto proof-of-concept kryptoměna používající jako první protokol CryptoNote, který byl publikován na začátku roku 2014 \cite{githubbytecoin} % CryptoNote implementace ByteCoin -> https://github.com/monero-project/monero/commit/296ae46ed8f8f6e5f986f978febad302e3df231a %Bytecoin měl ovšem problém s tzv. preminem, tedy stavem, kdy kryptoměna publikovaná na veřejnost má již velkou část peněz předem vytěženou. Zde se jednalo o vytěžení 82\% mincí před zveřejněním této měny \cite{fluffyponyonbytecoin}. % Duvod forku https://coinmetrics.io/papers/dissertation.pdf premine xx procent Although Bytecoin had a promising protocol aimed at privacy, there was a problem with premine, meaning that cryptocurrency at the time of publishing had already 82\% of the coins already emitted \cite{fluffyponyonbytecoin}. %Toto byl důvod pro komunitu okolo anonymních kryptoměn, aby udělali hardfork a tím vytvořili kryptoměnu novou, BitMonero \cite{bitmonero}. % Fork Bytecoin -> BitMonero https://github.com/monero-project/monero/commit/1a8f5ce89a990e54ec757affff01f27d449640bc That was the reason why people interested in anonymous cryptocurrencies decided to create a Bytecoin fork under the name of BitMonero \cite{bitmonero}. %Důležitou změnou bylo oddělení hlavní části vývojářů a vytvoření samostatného forku s názvem Monero dne 23.06.2014 . Tím vznikla kryptoměna, která měla od počátku veřejně známý blockchain, jasně definovaný cíl a motivovaný tým vývojářů \cite{monerofork}. % Fork BitMonero -> Monero https://github.com/monero-project/monero/commit/003b1f909d416ab2c869b76176380c5f133bdad4#diff-c47c7c7383225ab55ff591cb59c41e6b % \begin{table} %\centering %\begin{minipage}[t]{\linewidth} Next important moment was when a significant part of the developers decided to abandon the project in favor of creating a new fork named Monero in 23.06.2014. By this action, Monero cryptocurrency was created with publicly known blockchain from the start, strictly defined goals and motivated team of developers \cite{monerofork}. %% Komentář Vlasta 10.7.: Návrh: v téhle kapitole by bylo moc hezká nějaká přehledová tabulka cca 5 největších kryptoměn, kde bys je porovnal podle vybraných kriterii. Třeba kriterium "Množství odesílané měny je šifrováno" by bylo v sloupečku a v pro každou kryptoměnu na řádek vyznačil, zda to splňuje nebo ne. Bylo by pak přehledně vidět čím je Monero tak vyjimečné a jak jsou na tom v těhle kriteriích ostatní kryptoměny. \section{Monero market cap} As Monero is often mentioned for its privacy features, decentralization in mind and fungibility as main asset, table \ref{table:monero-top5} puts Monero in the direct comparison against top 5 cryptocurrencies. In order to compare different cryptocurrency projects, market capitalization (market cap) is often used as a way of ranking \cite{elbahrawy2017evolutionary}. It indicates the relative size of cryptocurrency by the formula: \\ \centerline{ \textit{\textit{Market Cap = Circulating Supply * Price} }} \textbf{Privacy} in cryptocurrency is a feature that assures that amount of coin user owns, sends or receives cannot be seen on the blockchain. \textbf{Decentralization} in cryptocurrency network all nodes are equals. That means that there is no supernode that can override how transactions are being processed as well as there is no single entity in control. \textbf{Fungibility} means that every coin ever emitted has the same value as the others and cannot be traced back thus there cannot be coin blacklist. \begin{figure}[H] \centering\begin{tabular}{{p{0.06\linewidth}p{0.13\linewidth}p{0.17\linewidth}p{0.15\linewidth}p{0.15\linewidth}p{0.15\linewidth}}} \textbf{Rank} & \textbf{Name} & \textbf{Transactions per day} & \textbf{Privacy} & \textbf{Decentra-lization} & \textbf{Fungibility} \\ 1 & Bitcoin & 225039 & No & Yes & No \\ 2 & Ethereum & 610953 & No & Yes & No \\ 3 & XRP & 633974 & No & No & Varies \\ 4 & Bitcoin Cash & 125404 & No & Yes & No \\ 5 & EOS & 406380 & No & Yes & Varies \\ 13 & Monero & 4010 & Yes & Yes & Yes \end{tabular} \captionof{table}{Monero features in top 5 cryptocurrencies.} \label{table:monero-top5} \end{figure} As can be seen from data in table \ref{table:monero-top5}, coins that are most popular by market cap metrics, are not centered around privacy. Altought it is often believed that using cryptography means anonymity, it isn't true in most cryptocurrencies especially in Bitcoin \cite{conti2018survey}. XRP and EOS are in special position compared to typical cryptocurrency as they offer a crypto platform with contracts, so privacy implementation and fungibility varies from contract to contract \cite{domingues2018allvor}. %Zdroj transaction volume: https://bitinfocharts.com/monero/ %Zdroj Bitcoin: https://bitcoin.org/en/protect-your-privacy %Zdroj Ethereum: https://ieeexplore.ieee.org/document/8356459/ %Zdroj XRP: https://ieeexplore.ieee.org/document/8356459/ %https://ripple.com/insights/xrp-compares-btc-eth/ %https://bitcoinist.com/not-decentralized-ripple-freezes-1m-user-funds/ \newpage \section{Monero competitors} %Mimo Monero se snaží o anonymní vlastnosti měny i řada dalších projektů. Nejblíže Moneru je ByteCoin, ze kterého Monero vychází, má ovšem špatné jméno v krypto komunitě kvůli 82\% premine měny. Alternativu k Moneru se zachováním řady vlastností nabízí jeho fork Aeon, který využívá méně náročnou implementaci za cenu nižšího stupně anonymity. Monero is not the only one cryptocurrency that aims at privacy and anonymity features, there are many privacy coins already in existence. Most similar to Monero is ByteCoin from which Monero was forked, but is overall unpopular due to 82\% premine. A viable alternative to Monero offers its fork Aeon that is more lightweight as opposed to Monero with slightly fewer privacy features. %\begin{figure}[H] %\centering %\begin{tabular}{p{0.1\linewidth}p{0.16\linewidth}p{0.1\linewidth}p{0.15\linewidth}p{0.15\linewidth}p{0.15\linewidth}} %\textbf{Název} & \textbf{Protokol} & \textbf{Block Time {[}s{]}} & \textbf{Stealth Address } & \textbf{Anonymní transakce} & \textbf{Podpis transakce} \\ %Aeon & CryptoNote-Light & 240 & Ano & Ano & Ring Signature \\ %Byte-Coin & CryptoNote & 120 & Ano & Ano & Ring Signature \\ %DASH & X11 & 150 & Ne & Ne zcela & Ano \\ %Monero (XMR) & CryptoNote & 120 & Ano & Ano & RingCT \\ %PIVX & Zerocoin & 60 & Ne přímo & Ano & x \\ %Verge (XVG) & Scrypt & 150 & Ano & Ne, TOR\&I2P & RingCT WIP \\ %Zcash (ZEC) & Zerocash & 150 & Vlastní shielded address & Ano pomocí SNARKS & x \\ %Zcoin (XZC) & Lyra2 =\textgreater MTP & 600 & Ano & Ano, mint \& spend & Ring Signature %\end{tabular} %\captionof{table}{Přehled kryptoměn se zaměřením na anonymitu} %\label{table:monero-alternatives} %dash https://bitcointalk.org/index.php?topic=1562109.0 %ďash https://docs.dash.org/en/latest/introduction/information.html %pivx https://github.com/PIVX-Project/PIVX %pivx https://www.reddit.com/r/pivx/comments/7gjjyw/what_are_the_benefits_of_multisig_addresses/ %zcoin https://github.com/zcoinofficial/zcoin/wiki/Information-for-exchanges %zcoin https://zcoin.io/zcoins-privacy-technology-compares-competition/ \begin{figure}[H] \centering \begin{tabular}{p{0.1\linewidth}p{0.16\linewidth}p{0.1\linewidth}p{0.15\linewidth}p{0.15\linewidth}p{0.15\linewidth}} \textbf{Name} & \textbf{Protocol} & \textbf{Block Time {[}s{]}} & \textbf{Stealth Address } & \textbf{Anonymous transactions} & \textbf{Transaction signing} \\ Aeon & CryptoNote-Light & 240 & Yes & Yes & Ring Signature \\ Byte-Coin & CryptoNote & 120 & Yes & Yes & Ring Signature \\ DASH & X11 & 150 & No & Not fully & Yes \\ Monero (XMR) & CryptoNote & 120 & Yes & Yes & RingCT \\ PIVX & Zerocoin & 60 & Partialy & Yes & x \\ Verge (XVG) & Scrypt & 150 & Yes & Ne, TOR\&I2P & RingCT WIP \\ Zcash (ZEC) & Zerocash & 150 & Shielded addresses & Yes by SNARKS & x \\ Zcoin (XZC) & Lyra2 =\textgreater MTP & 600 & Yes & Yes by minting \& spending & Ring Signature \end{tabular} \captionof{table}{Comparison of Anonymous Cryptocurrencies and their features.} \label{table:monero-alternatives} \end{figure} Information sources used in table \ref{table:monero-alternatives} and in the picture \ref{pict:monero-alternatives-codebase}:\\ Aeon \cite{moneroalternativeaeon}, ByteCoin \cite{moneroalternativebytecoin}, Dash \cite{moneroalternativedash,moneroalternativedashdev}, Monero \cite{moneroprojectgithub}, Pivx \cite{moneroalternativepivx}, Verge \cite{moneroalternativeverge}, Zcash \cite{moneroalternativezcash}, Zcoin \cite{moneroalternativezcoin}. \iffalse \begin{figure}[H] \centering \begin{tikzpicture}[sibling distance=10em, every node/.style = {shape=rectangle, rounded corners, draw, align=center, top color=white, bottom color=blue!20}]] \node {Bytecoin} child { node {DASH} child { node {PIVX}}} child { node {BitMonero} child { node {Monero} child { node {AEON} } } }; \node[xshift=21mm]{Verge}; \node[xshift=4cm] {Bitcoin} child[xshift=25mm] { node {Zcash}} child[xshift=0cm] { node {Zcoin}}; \end{tikzpicture} \caption{Codebase overview of the selected cryptocurrencies.} \label{pict:monero-alternatives-codebase} \end{figure} \fi %verge ma svoji codebase "non-bitcoin coin" viz prvni commit https://github.com/PIVX-Project/PIVX/commit/4405b78d6059e536c36974088a8ed4d9f0f29898 \section{Development cycle} %Vývoj Monera je postaven na vydáních, která jsou plánovány na každých 6 měsíců. Přitom na rozdíl od jiných kryptoměn jde o pravidelné aktualizace, které vývojáři nechtějí spojovat s termínem hardfork. %% Komentář Vlasta 10.7.: Trochu popiš jak moc je Monero rozšířené. Pro představu v porovnání s dalšími kryptoměnami. Aby bylo jasné, že to není nějaká obskurní kryptoměna. Monero development cycle is based upon planned network updates that occur every six months. By this developers want to encourage work on the project with regular updates in contrast to other cryptocurrencies that don't want any new hard forks in the future as it brings the danger of splitting the coin into several versions \cite{mccorry2017atomically}. % Monero attack https://lab.getmonero.org/pubs/MRL-0002.pdf %Hlavními důvody pro tento způsob vývojového cyklu jsou: %\begin{itemize}\itemsep0em %\item Komunita očekává pravidelné aktualizace. %\item Možnost upravovat mining algoritmus pro ASIC-resistance. %\item Prostor pro pravidelná vylepšení. %\end{itemize} \iffalse \begin{itemize}\itemsep0em \item The community knows that updating is the way forward. \item Enhanced ASIC resistance by changing the mining algorithm. \item There is always an opportunity to push updated code and improvements in a biannual cycle. \end{itemize} \fi %\begin{figure}[H] %\center %\color{gray} %\rule{\linewidth}{1pt} %\ytl{03.03.2014}{ByteCoin - publikování na GitHub} %\ytl{17.04.2014}{Fork ByteCoinu - vznik BitMonero kryptoměny} %\ytl{23.07.2014}{Fork BitMonera - vznik Monero kryptoměny} %\ytl{22.03.2016}{Monero v2 - úprava ringsize, čas bloku 120 sekund} %\ytl{21.09.2016}{Monero v3 - rozdělení transakce na více částek} %\ytl{05.01.2017}{Monero v4 - souběh normálních a RingCT transakcí} %\ytl{15.04.2017}{Monero v5 - aktualizace velikosti bloku a algoritmu pro poplatky} %\ytl{16.09.2017}{Monero v6 - vynucení RingCT transakcí s ringsize =>5} %\ytl{06.04.2018}{Monero v7 - změna CryptoNight algoritmu kvůli ASIC, ringsize =>7} %\ytl{--.10.2018}{Příští aktualizace sítě} %\bigskip %\rule{\linewidth}{1pt}% %\end{minipage}% %\color{black}\caption{Vývoj Monera} %\end{table} %\color{black}\caption{Časová osa vývoje Monera} %\label{monero-timeline} %\end{figure} \newpage \begin{figure}[H] \center \color{gray} \rule{\linewidth}{1pt} \ytl{03.03.2014}{Bytecoin - published on GitHub} \ytl{17.04.2014}{ByteCoin fork - the creation of BitMonero cryptocurrency} \ytl{23.07.2014}{BitMonero Fork - the creation of Monero cryptocurrency} \ytl{22.03.2016}{Monero v2 - ring size change, block time set to 120 seconds} \ytl{21.09.2016}{Monero v3 - transactions are split into smaller amounts} \ytl{05.01.2017}{Monero v4 - souběh normálních a RingCT transakcí} \ytl{15.04.2017}{Monero v5 - block size update and fee algorithm adjustments} \ytl{16.09.2017}{Monero v6 - RingCT forced on the network with ring size => 5} \ytl{06.04.2018}{Monero v7 - change of CryptoNight mining algorithm to prevent ASIC on the network, ring size set to =>7} \ytl{--.10.2018}{Future network update} \bigskip \rule{\linewidth}{1pt}% %\end{minipage}% %\color{black}\caption{Vývoj Monera} %\end{table} \color{black}\caption{Monero development timeline.} \label{monero-timeline} \end{figure} \newpage %Zároveň je s těmito vydáními spojena řada chyb, které jsou průběžně opravovány. Mezi známé problémy Monera v minulosti patřily: Updates are meant to improve and enhance the previously established codebase as well as fixing already existing bugs that are continuously being resolved. Known problems in Monero history were: %\begin{itemize} %\item \textbf{Spam attack} %\begin{itemize} %\item Šlo o zahlcení sítě při posílání transakcí kvůli poplatku za transakci 0.005 XMR. Rychlou opravou bylo úprava poplatku na 0.1XMR. Toto vedlo k implementaci dynamického poplatku za transakci, který je založený na zvolené prioritě platby \cite{monerospamattack}. %zdroj https://bitcointalk.org/index.php?topic=583449.msg8519146#msg8519146 %\end{itemize} %\item \textbf{Split chain attack} %\begin{itemize} %\item Cílené využití zranitelnosti ve výpočtu základu Merkle tree vedla k vytvoření dvou bloků se stejnou výškou a hashem na síti, lišily se ovšem 2 transakcemi na konci bloků \cite{macheta2014counterfeiting}. Tím vznikly dva různé chainy Monera. Chyba se týkala celého protokolu Cryptonote a všech kryptoměn na něm založených, v případě Monera komunita zastavila pohyb transakcí na burzách do dalšího dne, kdy byla vydána oprava \cite{cryptonotemerkletree}. %\end{itemize} %\item \textbf{Analýza transakcí v blockchainu Monera} %\begin{itemize} %\item Výzkum provedený v roce 2017 ukázal z pohledu anonymity problémy se systémem, jakým probíhají transakce. Nejdůležitějším z nich bylo objevení faktu, že při nastavení velikosti ring signature na nule můžeme v blockchainu vysledovat částku na výstupu transakce. %\item Tento problém byl vyřešen vývojovým týmem záhy díky nasazení technologie RingCT při kterých zároveň nastavili na síti podmínku, při které velikost ring signature musí být %\end{itemize} %zdroj https://eprint.iacr.org/2017/338.pdf %\end{itemize} %zdroj https://getmonero.org/2017/05/17/disclosure-of-a-major-bug-in-cryptonote-based-currencies.html \begin{itemize} \item \textbf{Spam attack} \begin{itemize} \item Was aimed to oversaturate the Moneros network by sending very small transactions and leveraging cheap transaction fee of 0.005 XMR. Immediate fix was established by raising the fee to 0.1 XMR. This problem led to the implementation of dynamic transaction fee based on chosen transaction priority \cite{monerospamattack}. %zdroj https://bitcointalk.org/index.php?topic=583449.msg8519146#msg8519146 \end{itemize} \item \textbf{Split chain attack} \begin{itemize} \item The successful exploit of Merkle root calculation vulnerability led to the creation of two blocks of the same height and hash, but with two different transactions on the end of the block \cite{macheta2014counterfeiting}. By this, two separate Monero chains were created. Exploit was applicable to all CryptoNote based cryptocurrencies. In the case of Monero, all transactions were stopped on exchanges until next day, when the fix was issued \cite{cryptonotemerkletree}. \end{itemize} \item \textbf{Transaction analysis in Monero blockchain} \begin{itemize} \item Research published in 2017 uncovered past and present problems in anonymity with Monero transaction system. The most significant discovery was that a large portion of transactions used a ring signature of zero which caused traceability of the amount of coin in the transaction output on the blockchain. \item This issue was resolved by Monero team already in 2016 with Monero v2, where ring signature was set to =>3. Soon after the paper was released, Monero got its v6 update with the mandatory usage of RingCT in transactions. \end{itemize} %zdroj https://eprint.iacr.org/2017/338.pdf \end{itemize} %zdroj https://getmonero.org/2017/05/17/disclosure-of-a-major-bug-in-cryptonote-based-currencies.html \newpage %\section{CryptoNote protokol} %\subsection{Verzování a aktualizace} %\subsection{Proof-of-Work} \section{Monero Network Structure} %Síť zajišťující fungování Monera jako kryptoměny s transakcemi má decentralizovanou podobu zajištěnou %\section{Adresování v síti} %\subsection{Typy adres} %\subsection{Transakční adresa} %\subsection{View klíč} %\section{Transakce} %\subsection{Struktura} %\subsection{PoW} %\subsection{Vstupy, výstupy, mixing} %\subsection{Průběh transakce} %\subsection{Sledování transakcí na síti} %\subsection{Kovri} %\section{Technologie} %\subsection{Stealth Address} %\label{sec:stealthaddresses} %\subsection{Ring Signatures} %\label{sec:ringsignatures} %\subsection{RingCT} %zdroje https://eprint.iacr.org/2015/1098.pdf https://getmonero.org/resources/moneropedia/ringCT.html %\label{sec:ringct} \section{Principle of anonymity} \subsection{System of transactions} \subsection{Wallets and keys} \subsection{Proof of Work} \subsection{Transaction traceability} \section{Technology and principles used in Monero} \subsection{Stealth Addresses} \subsection{Ring Signatures} \subsection{RingCT} \subsection{Kovri} %\chapter{Používání monera} %\section{Pěněženky} %\subsection{Hot wallet} %\subsection{Cold wallet} %\subsection{View only wallet} %\subsection{Možnosti útoků na peněženku} %\subsection{Přehled bezpečnosti úložných způsobů} %\section{Software pro práci s kryptopenězi} %\subsection{Vytvoření peněženky} %\subsection{Fullnode, remote node} %\subsection{Multisig} %\subsection{Srovnání wallet softwaru} %\subsection{Exchanges} %\section{Scamy v prostředí kryptoměny} %\subsection{Online portály} %\subsection{Mining pooly} %\subsection{Cílený malware} %\subsection{Delivery chain} \chapter{Monero usage} \section{Wallets} \subsection{Hot wallet} \subsection{Cold wallet} \subsection{View-only wallet} \subsection{Attacking the wallet} \subsection{Overview of wallet storage methods} \subsection{Cryptocurrency wallet software} %\subsection{Creating a wallet} \subsection{Full and remote node} \subsection{Multisig implementation} \subsection{Wallet software comparison} \subsection{Exchanges} \section{Problems in Monero environment} \subsection{Monero scam list} \subsection{Targeted malware} \subsection{Delivery chain disruption} %\section{Monero usecase} %\subsection{Darknet Markets} %\subsection{Monero Markets} %\subsection{Úskalí tradingu anonymní měny} %\subsection{Srovnání s ostatními kryptoměnami} \section{Monero use case} \subsection{Darknet markets} \subsection{Monero markets} \subsection{Trading problems associated with anonymity} \subsection{Usage comparison with other cryptocurrencies} \section{Usage anonymity} \chapter{Monero user research} \section{Definition, research questions} \section{Participants selection} \section{Results international, CZ} \chapter{Monero usage and storage best practices} \section{Designing a secure storage system} \section{Secure usage pattern} \section{Secure crypto portal} \chapter{Obtaining Monero and running the network} \section{Monero Proof-of-work} \section{Mining pools, solo mining} \section{Web mining, botnet mining} % Web mining: https://arxiv.org/pdf/1806.01994.pdf \section{Cloud mining} \section{Systems for mining - ASIC, prebuilds} \section{Mining software} \section{XMR obtaining comparison} \chapter{Research done on miners} \section{Definition, research questions} \section{Participants selection} \section{Results international, CZ} \chapter{Pool owners research} \section{Definition, research questions} \section{Participants selection} \section{Results international, CZ} \chapter{Mining malware} \section{Prevention, detection and recovery} \subsection{Systems administrators perspective} %kitty https://www.incapsula.com/blog/crypto-me0wing-attacks-kitty-cashes-in-on-monero.html \subsection{Regular users} \chapter{Designing secure mining environment} \section{Linux-based solution} Ansible, Centos 7 \section{Windows-based solution} Windows 10 ISO unattended install, Powershell scripts, XMR-stak \chapter{Plan} \begin{figure}[H] \center \begin{tabular}{ll} Month & Task \\ 1.7.2018 & Monero cryptocurrency; Monero Usage \\ 1.8.2018 & Research design \\ 1.9.2018 & Data collection; Monero mining and running the network \\ 1.10.2018 & Data summary \\ 1.11.2018 & Best practices for usage and storage \\ 1.12.2018 & Mining malware; Secure mining system design \\ 1.1.2019 & Cryptocore.cz web \\ 1.2.2019 & Spare time \\ 1.3.2019 & Month for completion \\ 1.4.2019 & Final version + print \end{tabular} \caption{Diploma thesis plan} \label{ssme-thesis-plan} \end{figure} \printbibliography[heading=bibintoc] \appendix %% Start the appendices. %\chapter{Zdroje k tabulce 2.2} %dash https://bitcointalk.org/index.php?topic=1562109.0 %dash https://docs.dash.org/en/latest/introduction/information.html %pivx https://github.com/PIVX-Project/PIVX %pivx https://www.reddit.com/r/pivx/comments/7gjjyw/what_are_the_benefits_of_multisig_addresses/ %zcoin https://github.com/zcoinofficial/zcoin/wiki/Information-for-exchanges %zcoin https://zcoin.io/zcoins-privacy-technology-compares-competition/ \end{document}