2

A non-validating notary receives inputs in the form of Corda StateRefs. What information can be reversed engineered from a StateRef and what additional information would an attacker need to be successful in doing so?

For more context, please see the answer to the question, In Corda, what data is sent to a non-validating notary service? posted by @joel which explains that the inputs in the form of StateRefs are sent to a non-validating notary.

Richard Logwood
  • 3,163
  • 23
  • 19

1 Answers1

3

You can deduce the following information from a StateRef:

  1. That the transaction with identifier StateRef.id has at least StateRef.index outputs
  2. That all the StateRefs with the same StateRef.id were produced by the same transaction

You cannot deduce anything about the contents of the state.

Joel
  • 22,762
  • 5
  • 26
  • 41