selsta: asymptotically is correct, they'd fail validation

so at best you'd get a short string of invalid blocks and block the node

thanks

fluffypony: will ping you later today about DNS

kk

Is there a cryptographic way to generate a value sG from a set of public keys K_1 ... K_n such that any one with a private key corresponding to a public key in the set can retrieve s but nobody else not even the generator of sG?

also could such an operation be done non-interactively?

fluffypony: about DNS, the XMR donation address has to be updated in openalias record if not done yet

philogy very unlikely

Because I was thinking if a sender creates a more complex transaction with multiple outputs that revoke each other knowing the private revocation key s would allow him to know when any of the outputs are spent because he could recreate the revocation key image

is [rK1]K2 = [rK2]K1 ?

It's not true, the wallet does not do block validation. It's the node's job (and if you offload that job to an untrusted party, then you asked for it).

philogy: you can't multiply curve points together

Wouldn't the sender know s if he made the tx?

I mean you can just interpret the point in the [] as an integer right?

that's what I'm researching, if there is an easy way for the sender to create sG so that the recipients know s but the sender doesn't

UkoeHB_: as I've come to understand it there are 2 options: either sG is created by a shared secret which has to be interactively created or one has to prove that the different commitments add up to zero

The first comes with the downside of interactivity the second with the downside of additional data

philogy: that's not how the group structure works unfortunately

sarang: what do you mean by group structure I'm not too familiar with all the terminology I'm afraid

I mean that scalars and group elements can't be mixed-and-matched in that way algebraically

The only well-defined operation on two group elements is addition, which is more complex than simple integer addition (or modular addition, for that matter)

is group addition another way of saying point addition?

Yes; curve points have a group structure

binaryFate: oh - yeah it hasn't yet

binaryFate: updated

philogy: that seems to be the case

moneromooo what's going on with the commit named "test" on 6574?

it's a test of the emergency commit system

:-P

Ah, crap. That was some fix I needed someone to test with, which ended up in the PR. Thanks.

Turns out the fix worked ^_^ I'll fix.

Well, looks like I had fixed it but omitted the final push to github. Fixed.

Thanks for checking :)

:)