i'm new to monero, just wondering if monero support virtual machine like EVM in ethereum, if not, does this possible later, thanks a lot!

hello?

anybody here:)

<learninandlurkin> This is probably the wrong channel for that question, this is for Monero research. Try #monero

<learninandlurkin> I know nothing about EVM so I can't help you with your question sorry

It does not.

Yeah but can you imagine how hard we would pump if the MRL pretended like we were going to for a couple weeks

Hey guys, I think I've come up with a scheme to implement ETH smart contracts on XMR blockchain!

/s emphasis on "scheme"

Tomorrow's headline: "Monero planning to embed a Scheme interpreter"

:D

Ok, so there is nothing related to smart contract on the monero chain, right? I thought it would be great if we have a chain with privacy preserved smart contract functionalities.

Right.

Hello all

Working on more Triptych preprint stuff today

Lost some work due to a laptop malfunction, so I'm redoing it :(

@Guest_84 although smart contract functionality is outside the scope of Monero's primary goals, it is definitely possible.

Origo and Starling have zero-knowledge execution, Loki (built on Monero) is more focused on the application layer. Oasis Labs is effectively a trusted execution environment.

Not relevant to -lab, but I'm happy to chat in PM, or I think this would be a fine topic for #monero-research-lounge

I had been looking into this for a while.

You can also take advantage of the tx_info field to store simple contracts as well

(to clarify, I mean privacy preserving smart contracts are possible technologically, not that we'll possibly implement them on Monero)

Using tx_extra memo field for extra functionality like this makes the metadata really noisy, not recommended due to privacy issues.

Right, it's called tx_extra. As long as the resulting contract looks uniform (which is hard to do in practice), then it can work.

A good topic for this channel IMO

👍

Hmm, even if statistically uniform output, also have to think about insidious information leaks from things like string length

But if all the smart contracts output to the same space, then they'll look uniform among each other

But not uniform with transfer-of-value-only transactions.

But if we added dummy smart contract output to all TOVO transactions too... :thinking:

Couldn't that be mitigated by adding random data for these transactions

Oh you just had a similar thought :-P

:- )

Hmm, what are all the things that we could put in tx_extra... PIDs, smart contract outputs, keys, etc. Let L be the length of the longest one

If a transaction has a tx_extra longer than L, it's rejected for being something unusual

If something is being used with length less than L, it needs to be padded so that the encrypted output is length L

(and anything less than length L would be rejected at the protocol level due to information leak. Padding must be mandatory)

Uhm, when I say "tx_extra longer than L", I mean "something to put in tx_extra that is longer than L"

Sorry, I'm on the bus in San Francisco and it's really hard to focus

btw, if we can figure out a way to do smart contracts on Monero that *rigorously* do not leak information about the activity, I'm totally game :- P

BTW suraeNoether recommends waiting until next Monday for a research meeting (not related to this discussion)

suraeNoether: nearly finished with the Triptych preprint draft

I have only to include some additional details on selecting Pedersen masks

It's down to 15 pages, but that's without writing out all the definitions relating to sigma protocols

(not sure if that's worth including in detail since they're well known)