peach34: this was answered yesterday no? key to p3 is ge_frombytes_vartime, then if you need a p2 just ge_p3_to_p2.

ty for the link

@sarang: btw, I remember in one of the projects I was involved with, we could go from ringct to zerocoin directly, but not directly from zerocoin to ringct. Though lelantus has some substantial design differences from zerocoin, is that possible with lelantus? or is it only one way.

so basically, I read on your github just now you could consume a monero output and generate a lelantus output, but is the reverse possible too?

for instance that could help if multisig is not possible with lelantus, right? as then you could use ringct for that when needed.

You'd run into weird heuristics about spend patterns, probably