1. vin
    1. key
      1. amount
        1. always 0
      2. key_offsets
        1. Locate the v + 1 keys of the current input's ring from the chain
          1. 6.2.2 Signature
          2. v+1 = 11
          3. 3.5 Multilayer Linkable Spontaneous Anonymous Group (MLSAG) signatures
          4. n = 11
          5. m = 2
          6. known private keys
          7. for
      3. k_image
        1. key image for the onetime address.
          1. 3.5 Multilayer Linkable Spontaneous Anonymous Group (MLSAG) signatures
          2. Section ”Signature”
          3. How to compute key images
          4. Section ”Linkability”
          5. Avoid double-spending
          6. 6.2.3 Avoiding double-spending
        2. key image for zero commitment is not stored
        3. a part of the signature for the input j
  2. vout
    1. amount
      1. always 0
    2. target
      1. key
        1. Onetime address
          1. 4.2 One-time addresses
          2. 4.2.1 Multi-output transactions
          3. 4.3 Subaddresses
  3. extra
    1. 6.3 Concept summary: Monero transactions
      1. transaction public key
        1. 4.2 One-time addresses
        2. 4.2.1 Multi-output transactions
      2. subaddress
        1. subaddress'd output t
          1. 4.3 Subaddresses
        2. normal address'd output t
      3. encoded payment ID
        1. 4.4 Integrated addresses
  4. rct_signatures
    1. type
      1. 4 is RCTTypeBulletproof2
    2. txnFee
      1. Transaction fee
        1. 6.2.1 Amount commitments and transaction fees
    3. ecdhInfo
      1. amount
        1. encrypted amount for each output
          1. 5.3 Amount commitments
    4. outPk
      1. Output amount commitments
        1. 6.2.1 Amount commitments and transaction fees
        2. 5.2 Pedersen commitments
  5. rctsig_prunable
    1. bp
      1. Range proofs / Bulletproofs
        1. 5.5 Range proofs
    2. MGs
      1. ss
        1. r's in the signature for the input j
          1. 3.5 Multilayer Linkable Spontaneous Anonymous Group (MLSAG) signatures
          2. n = 11
          3. m = 2
          4. Also see vin/key/key_offsets
      2. cc
        1. c1 in the signature for the input j
      3. key images are in vin/key/k_image
    3. pseudoOuts
      1. Pseudo output commitments for the input amounts
        1. 6.2.1 Amount commitments and transaction fees
        2. 5.2 Pedersen commitments
      2. The private key used to generate the pseudo output comment is also used in the ring signature
        1. 3.5 Multilayer Linkable Spontaneous Anonymous Group (MLSAG) signatures
  6. Appendix A RCTTypeBulletproof2 Transaction Structure
  7. Notation
    1. comment
    2. references to chapters are in the brace
      1. like this
    3. j is the input index in vin
    4. p is the output index in vout