sarang: suraeNoether both exciting updates :)

Reorganizing a paper is not exciting :(

It is quite dull

the result-updates are the exciting thing :p

and the effort!!

what does the multiexp function do in bulletproofs.cc?

It multiplies, and it accumulates. It's a MAC.

(faster than doing it naively)

could you point me to a naive implementation or explanation so I can get a better grasp of what is being accomplished?

T=0 for n in range(N): T+=a[n]*A[n]; return T

The methods are Straus and a simplified Pippenger algorithm

thanks!

if it multiplies and accumulates, what is the meaning behind the name "multiexp"?

Mutliple exponentiation.

Because a multiplication is just an exponentation in some ways.

Like when you add logs instead of multiplying :)

I *think* it's just historical context.

Multiplying scalar to point in ECC is akin to modexp in RSA.

There might be more to it, I'd be curious.

thanks

Some people prefer multiplicative notation for groups. Others prefer additive notation, and are correct :)

The former leads to exponentiation, the latter to multiplication

I also see the term "multiscalar multiplication" used instead of multiexp

Thanks, I appreciate the lesson :D

Either way, the methods used scale as O(n/log(n))