-
IsthmusI also strongly disagree personally (and professionally)
-
gingeropolousi disagree occasionally
-
suraeNoetherSarang, I am sorry, but my delays today on finishing this up took longer than expected, I had to cross reference another soundness proof... I'll be making comments on overleaf tomorrow. Thanks again for your patience
-
sarangNo problem!
-
QQIs the salt in bulletproofs' get_exponent function null terminated?
-
QQ
-
QQLike the "SubAddr" is in subaddress generation?
-
QQ
-
koehi, given field element r, where x = r + 1/r, is it trivial to find r given x?
-
suraeNoetherKoe try the quadratic formula to solve for r
-
suraeNoetherOh arbitrary field
-
sarangYou'd need to compute a root
-
suraeNoetherKoe: over an arbitrary field the answer is no. Solutions are not unique in the complex numbers, i.e you can get collisions. If the field is Zp I will have to think about it for a few more minutes
-
sarangVery interesting paper by JP Aumasson: eprint.iacr.org/2019/1492
-
sarangDiscusses the round choices for popular algorithms in hindsight
-
Isthmus@n3ptune pointed out that I might have miscalc'd one of the unlock times (second versus millisecond)
-
IsthmusHere's the raw data:
-
Isthmus
-
Isthmus(this is just the top 20, obviously there are like 5 million rows in this table)
-
IsthmusOh, + hashes for good measure:
-
Isthmus
-
niocsomeone recently mentioned that there is some limit to the unlock time. No mention of the limit but the year 4600 mentioned yesterday seems to be a bit beyond that
-
moneromoooFor time unlock times, it's a 64 bit number of seconds since the epoch. 4600 years is going to be nowhere near the limit.
-
moneromoooI just checked, the limit is ~600 billion years. Assuming no mistake.
-
niocmoneromooo: "limit"
-
» Isthmus chuckles at nioc
-
IsthmusLemme just stash this 0.03 XMR away until the heat death of the universe
-
suraeNoether600 billion is so much shorter than the heat death
-
suraeNoethersarang I disagree with JP aumasson at least with chacha
-
sarangYeah?
-
suraeNoetheryeah, chacha has had a lot of recent stuff come out, including an allegedly efficient 8-round distinguisher
-
suraeNoether
-
suraeNoethernot to mention the slightly less new stuff: tosc.iacr.org/article/view/574
-
suraeNoetheriirc chacha20 was originally recommended. i personally suspect that chacha will require at least 20 rounds for any hope of security that lasts more than a decade; progress is being made too quickly on that one