Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2018-09-24 | bulletproofs: multiply points by 8 first thing in verification | moneromooo-monero | 1 | -15/+17 | |
instead of merging that with other scalar multiplications where possible for speed, since this is not actually safe | |||||
2018-09-11 | bulletproofs: #include <openssl/bn.h> | moneromooo-monero | 1 | -0/+1 | |
Apparently needed for openssl 1.1.x | |||||
2018-09-11 | bulletproofs: speed up the latest changes a bit | moneromooo-monero | 1 | -32/+36 | |
2018-09-11 | bulletproofs: scale points by 8 to ensure subgroup validity | moneromooo-monero | 1 | -16/+28 | |
2018-09-11 | bulletproofs: match aggregated verification to sarang's latest prototype | moneromooo-monero | 1 | -64/+39 | |
2018-09-11 | ringct: error out when hashToPoint* returns the point at infinity | moneromooo-monero | 1 | -1/+3 | |
Reported by QuarksLab. | |||||
2018-09-11 | bulletproofs: reject x, y, z, or w[i] being zero | moneromooo-monero | 1 | -2/+63 | |
Also try again when we're generate a proof with those characteristics Reported by QuarksLab. | |||||
2018-09-11 | bulletproofs: a few fixes from the Kudelski review | moneromooo-monero | 1 | -3/+20 | |
- fix integer overflow in n_bulletproof_amounts - check input scalars are in range - remove use of environment variable to tweak straus performance - do not use implementation defined signed shift for signum | |||||
2018-09-11 | bulletproofs: reject points not in the main subgroup | moneromooo-monero | 1 | -0/+13 | |
2018-09-11 | bulletproofs: speed up a few multiplies using existing Hi cache | moneromooo-monero | 1 | -2/+11 | |
2018-09-11 | Add Pippenger cache and limit Straus cache size | moneromooo-monero | 1 | -9/+20 | |
2018-09-11 | Pippenger multiexp | moneromooo-monero | 1 | -3/+3 | |
Based on sarang's python code | |||||
2018-09-11 | precalc the ge_p3 representation of H | moneromooo-monero | 1 | -11/+11 | |
2018-09-11 | Add a define for the max number of bulletproof multi-outputs | moneromooo-monero | 1 | -1/+2 | |
2018-09-11 | multiexp: some speedups | moneromooo-monero | 1 | -1/+2 | |
- use a raw memory block to store cache - use aligned memory - use doubling API where appropriate - calculate straus in bands | |||||
2018-09-11 | bulletproofs: add aggregated verification | moneromooo-monero | 1 | -175/+219 | |
Ported from sarang's java code | |||||
2018-09-11 | make straus cached mode thread safe, and add tests for it | moneromooo-monero | 1 | -2/+9 | |
2018-09-11 | add Straus multiexp | moneromooo-monero | 1 | -143/+47 | |
2018-09-11 | ringct: add bos coster multiexp | moneromooo-monero | 1 | -51/+154 | |
2018-09-11 | bulletproofs: misc optimizations | moneromooo-monero | 1 | -23/+87 | |
Use double mults where possible, avoid conversions, simplify | |||||
2018-09-11 | bulletproofs: multi-output bulletproofs | moneromooo-monero | 1 | -32/+316 | |
2018-01-31 | bulletproofs: more robust challenge computation | moneromooo-monero | 1 | -56/+47 | |
Changes from sarang, from a recommendation by an anonymous reviewer | |||||
2018-01-26 | Readd copyright starting date | xmr-eric | 1 | -1/+1 | |
2018-01-26 | Update 2018 copyright | xmr-eric | 1 | -1/+1 | |
2017-12-08 | bulletproofs: switch H/G in Pedersen commitments to match rct | moneromooo-monero | 1 | -13/+14 | |
Changes from sarang | |||||
2017-12-08 | add bulletproofs to the build, with basic unit tests | moneromooo-monero | 1 | -0/+760 | |
Based on Java code from Sarang Noether |