i wonder if implementing "account viewkeys" is technically possible? it does seem useful at least in theory, not having to create an entire new wallet (+ another seed to worry about) etc, and sharing only txs from a certain account. but it probably doesn't fit with the overall structure that already exists

.merges

im not sure if i understand how amounts are deobfuscated when received in a subaddress. if C=a*D=a*(B+M), how can the receiver get his subaddress private view key without having access to its private spend key?

aguycalled: web.getmonero.org/library/Zero-to-Monero-2-0-0.pdf chapter 4

UkoeHB_: there is where i see the private view key for a subaddress is kv(ks +Hn(kv,i)), so i assume i need ks for calculating it. does it mean i cant decode the amount of an output without the private spend key or am i getting it wrong?

actually, you only need kv to search for owned outputs, even though the 'full' view key includes ks

there are some tricks with diffie-hellman to make it work

i understand the process of scanning for owned outputs, but i don't understand how the amount is decoded if it is obfuscated from the ecdh of the public view key and the tx key

in the case of subaddresses, the recorded tx key is `r*Ksi`, so it carries the spend key component around

then just multiply with kv to get the full thing: `kv*r*Ksi`

ok, now i got. thank u very much

np :)