to reconstruct the challenge for verifying an MLSAG signature, i need all key images including the key image for the commitment-to-zero. so am i right in assuming the key image of commitment-to-zero is only ignored when linking two MLSAG signatures in monero?

MLSAG doesn't use an image for the amount commitment component

you are right, i checked Z2M2 again and the key images only correspond to one time addresses and their private keys. are we using the private key for commitment-to-zero anywhere? how do we prove to the onlookers i know the difference of blinding factors between the commitment and the pseudo commitment?

never mind i see it now

K_(i,m) is the difference between commitments

when m>1

but wait we dont have to know the difference between blinding factors to sign?

Note that CLSAG does include such an auxiliary key image, but it is not used for linking purposes

Yes you do need to know

what for?

What is your question referring to

im trying to combine sections 3.5 and 6.2.2 in Z2M2

im trying to make sense how we are proving to the world that i know the difference between the blinding factors

what ever happened to the university thing with monero research lab, sarang , suraeNoether ? Like one of you was working on an entity or something.

maybefbi: you're showing that you know the base-`G` logarithm of the difference between the amount commitment and a commitment offset to the same value

and then you construct the blinding factors of the offsets and newly-generated amounts to sum to zero

this shows balance

in a signer-ambiguous way

gingeropolous: suraeNoether and others are collaborating with Clemson University to have a student work on a Monero-related project TBD

yeah but i thought u created a .... thing or something. it was like Magical something.

suraeNoether spearheaded a grant organization, MAGIC

He has since passed leadership on to others, but you'd have to ask him for details

but thats cool too. i was just answering this : old.reddit.com/r/Monero/comments/j0…ow_could/?ref=share&ref_source=link

ah yes, MAGIC, that was it

sarang: thanks. let me try writing some code, i will better understand what you said.