I’m pretty sure I did a mistake with the VES sig, I’ll correct that ASAP

Done. I was reasoning kind like homomorphic schemes when you encrypt and you decrypt later, but here you encrypt with the other participant key, so he must reveal it when going on chain.

Comments and feedback are very welcome

Interesting new preprint on determining bounds for Grin transaction amounts: eprint.iacr.org/2020/723

(usual disclaimer that preprints are typically not externally reviewed for accuracy before posting)

Oh interesting; the paper notes that the earlier linking work relating to Grin linking can apply to their analysis as well

Looks to me that for the most part, the flow ratios are quite good

It's a clever way to quantify it

sgp_ Isthmus_: I'm running deducible coinbase spend data for the Monero chain now

Should have results soon

sarang: reddit.com/r/Monero/comments/ha5kod…_ed25519_really_a_secure_choice_for

If you feel like commenting :-P

Already commmented

the rho-complexity is nearly 2^126

Ah, missed that

Commented just as you were sending your message!

The answer to "could the curve order be made larger" is "yes"

The answer to "should the curve order be made larger" is, IMO, "probably not at this point"

Isthmus_ and friends' analysis of the protocol against hypothetical quantum adversaries may address other areas of the protocol that would be vulnerable to assumed future analysis in the event of computing breakthroughs

I think OP confused the group order with the security level

curve25519 group order is something like 2^252, so rho would give you around 2^126 (rounded)

Unfortunately I think OP is still making this confusion :/

confusion averted

Interestingly, there are some nice designs for curves targeting higher security levels

but you certainly pay for it

and transitioning to a new curve for keys and getting the protocol to account for this sounds like a bit of a nightmare

A fun thought experiment, but a nightmare in practice

oh that's the guy that claims to be a Monero contributor (3 line PR) and a Bitcoin contributor (2 small PRs) and is now working on Mcafee's scamcoin

Ghost

which is just a Particl clone

he's "lead dev"

at least they didn't fork Monero