for rcttypefull, how was the order of ring members determined? It cant just be blockchain output index, since all real inputs have to share the same index

unless were decoys selected so the same number was above and below the real index? or did multi input rcttypefull tx just not work at all?

It was only used when you have one ring.

I thought it could technically be used for multi-inputs if you wanted to implement that?

It could.

guess it's a moot point now, but I'd expect there to be some annoying issues related to indexing

Initial code for Ledger support from cslashm: SarangNoether/monero #1

^ moneromooo

Still undergoing testing AFAIK

To avoid side channel attacks we use constant-time crypto operations. However, it sounds like those operations would be much faster if not constant-time. Is constant-time crypto used for verifying blocks? I don't see any danger for side channel analysis of a node verifying blocks. What is the real context around this concept?

For costly scalar-group operations in things like signature and proof verifications, we make heavy use of variable-time operations

Ah thanks