01:12:05 TheCharlatan: sarang's Monero implementation might be good to look at 01:12:21 https://github.com/SarangNoether/monero/tree/clsag-plumbing 01:14:19 Ha, I already looked it there. 01:15:02 What specific guidance are you looking for? 01:15:20 https://github.com/SarangNoether/monero/blob/74fb394b04350ccc6375f3d50124abb3818a649c/src/ringct/rctSigs.cpp#L333 domain separation is also used in the challenge hash 01:15:48 Might make sense to update the separators in ZtoM to those in cryptonote_config.h:212 on sarangs's branch. 01:16:05 The precise nature of the separation isn't important, FWIW 01:16:41 yeah that was the basic idea. bLSAG and MLSAG also dont exactly follow how Monero implements it either 01:17:22 no guidance, just busy reading through some details - sorry for the ruckus. 01:17:31 No problem at all! 01:21:51 TheCharlatan: in CLSAG domain separation is _required_ since each aggregation coefficient must be different even though the hash inputs are all the same. That's why there are multiple H_j differentiated by simple tags. However, more broadly and in the name of robust implementation, domain separating all uses of hash functions is recommended to avoid collisions. 01:22:26 So ZtM combined those two separate design goals for the CLSAG writeup 01:23:05 Tbh my footnote on the topic doesn't make that clear 01:25:20 and now Im full of regret lol 18:37:04 ping gingeropolous