05:40:18 <[keybase] seddd>: <3 16:07:47 Hello all; working on debuggin some Triptych optimizations today 17:38:12 Hooray, bug squashed 18:16:57 https://github.com/SarangNoether/monero/commit/432b60df2ceead39e9a43f3e19da5a1ec53d81b0 now includes proper Fiat-Shamir transcript hash challenges 18:22:08 Should have some better comparison data once I make a few more optimizations 18:48:32 <[keybase] seddd>: +1 18:51:19 <[keybase] seddd>: Just finished reviewing clsag sig gen in moneromooo's branch, doing a deeper dive this week. Is moneromooo's branch still the most recent clsag code? 18:52:18 Use this branch: https://github.com/SarangNoether/monero/tree/clsag-device 18:52:43 <[keybase] seddd>: Ok, ty 🤗 18:52:59 It adds two commits onto moneromooo's `clsag` branch: one for clearing certain prover data after signing, and another to offload certain device-specific functionality for use in ledger 18:53:28 There is currently a PR for that branch that actually includes the ledger code, which I have yet to review 18:53:34 (feel free to do so if you would like!) 18:54:21 The PR in question, from cslashm: https://github.com/SarangNoether/monero/pull/1 19:46:53 <[keybase] seddd>: Definitely, will take a look. Huge hw wallet fan 19:48:06 Great, thanks 20:31:53 Triptych optimization that shaves 15% off the original verification time: https://github.com/SarangNoether/monero/commit/cc6e44ba2c2790e680eaf895f6f1cf8bf4216eb2 20:39:59 Nice one :D 20:40:40 Running some MLSAG/CLSAG comparisons at small ring sizes just for fun 20:44:35 According to the tests, at ring size 16, Triptych takes 49% of the time to verify as CLSAG, and 41% of the time to verify as MLSAG 20:44:41 So twice as fast 20:45:06 And there are more optimizations yet to come! 20:46:12 Would be fun to have a comparison to the original RingCT as well 20:51:07 You mean... MLSAG 20:59:39 With Borromean range proofs ? 20:59:57 I suspect those timings are only for the signatures without range proofs. 21:01:02 Correct 21:03:56 Ah, thanks for clarifying 21:04:02 Yeah I was referring to borromean proofs 21:36:50 Does that imply they are comparable at ring size 32? (32 for triptych, 11 for clsag)?