19:31:50 <sarang> Hello all
19:32:06 <sarang> Sorry for the radio silence today... have been updating the Arcturus security model
19:32:31 <sarang> I've decided to use a similar balance definition to that of Omniring, which is a clever construction that I really like
19:33:20 <sarang> The idea is that you build an extractor to pull the signing data, and show that the tag was constructed properly and the amounts make sense
19:34:01 <sarang> and then argue that if an adversary could break the balance property or spend improperly, this would correspond to either a soundness break, a break in the binding property of the tag constructor, or a break in the commitment scheme
19:36:21 <sarang> At first it seemed tricky, since Arcturus only lets you extract information about the sum/difference of commitments... but then I remembered that the range proof already lets you extract commitment data!
19:36:37 <sarang> So you can build a composite extractor with Arcturus and Bulletproofs
19:36:48 <sarang> and that should give all the witness data you need to show balance