<[keybase] unseddd>: re: Kappos' work on zcash, am happy to see more open research on privacy. he seems like one of the good ones

Thanks everyone for feedback earlier on the proposal to research post-quantum strategies for Monero. Just submitted it to CCS - repo.getmonero.org/monero-project/ccs-proposals/-/merge_requests/142

<[keybase] unseddd>: Isthmus: the CCS looks like it only covers Insight (no outside researchers), is that correct?

Adam and myself would be the main people at Insight focusing on the research, though the CCS also covers the code and documentation reviewers.

(Arby's is on the way, so I might disappear soon)

<[keybase] unseddd>: for sure, looks like that won't be until the end of the project. will contribute then

@atoc @Isthmus Grin btc swap works with adaptor signature. The signature used on the bitcoin chain to redeem btc contain an adaptor for claiming the grin on the other chain.

If we can develop something like this with Monero signature scheme we might be able to use/adapt their scheme

If we can find a way to force the reveal of a private key in a bitcoin transaction the branch `dl-proof` in github.com/h4sh3d/xmr-btc-atomic-swap will work well I think

folks using my hardware, i have power issues here. gonna spin things down to conserve battery. wife has class to teach

Monthly research report: repo.getmonero.org/monero-project/c…sals/-/merge_requests/131#note_9896

Please post on Reddit as well :)

^ sarang

good bot

ty

h4sh3d[m] if we use an adaptor signature like Grin, do we still need to force the reveal of a private key in a bitcoin transaction?

i.e is this one approach or two distinct possible approaches?

atoc: the 2 approaches are independent. but force revealing secret key in bitcoin has the advantage of not requiring a refund tx in the monero side, and as far as i understand it, u cant have a refund tx in monero

Non-interactive refund transactions are not supported in Monero

how would the interactive version of a refund transaction work?

Well, you could encode a refund address in the transaction (there are a few ways to do this), but that requires the recipient to initiate the refund (hence it being interactive)

and this is almost certainly not what you want :)

To have a refund that can be claimed by the original sender requires plumbing that is not currently possible

(see, e.g., the DLSAG preprint for a proposal related to this)

if btc was using schnorr, the missing half of a spending key in monero could be a schnorr signature in btc, like they do it in discreet log contracts

Just do it monero vs aeon first. Jump through all the hoops there first. One thing at a time.

This has been languishing for what, years now ?

how much do swaps get used between coins that have had swaps for a long time?