15:10:26 <endogenic> sarang: suraeNoether both exciting updates :)
15:11:17 <sarang> Reorganizing a paper is not exciting :(
15:11:20 <sarang> It is quite dull
15:12:54 <endogenic> the result-updates are the exciting thing :p
15:13:00 <endogenic> and the effort!!
21:44:39 <WhatDo> what does the multiexp function do in bulletproofs.cc?
21:46:07 <moneromooo> It multiplies, and it accumulates. It's a MAC.
21:46:33 <moneromooo> (faster than doing it naively)
21:47:22 <WhatDo> could you point me to a naive implementation or explanation so I can get a better grasp of what is being accomplished?
21:48:27 <moneromooo> T=0 for n in range(N): T+=a[n]*A[n]; return T
21:55:25 <sarang> The methods are Straus and a simplified Pippenger algorithm
22:07:41 <WhatDo_> thanks!
22:08:17 <WhatDo_> if it multiplies and accumulates, what is the meaning behind the name "multiexp"?
22:16:47 <moneromooo> Mutliple exponentiation.
22:17:36 <moneromooo> Because a multiplication is just an exponentation in some ways.
22:17:46 <moneromooo> Like when you add logs instead of multiplying :)
22:18:07 <moneromooo> I *think* it's just historical context.
22:18:47 <moneromooo> Multiplying scalar to point in ECC is akin to modexp in RSA.
22:19:02 <moneromooo> There might be more to it, I'd be curious.
22:21:08 <WhatDo_> thanks
23:01:39 <sarang> Some people prefer multiplicative notation for groups. Others prefer additive notation, and are correct :)
23:02:04 <sarang> The former leads to exponentiation, the latter to multiplication
23:02:43 <sarang> I also see the term "multiscalar multiplication" used instead of multiexp
23:23:12 <WhatDo> Thanks, I appreciate the lesson :D
23:31:22 <sarang> Either way, the methods used scale as O(n/log(n))