aboutsummaryrefslogtreecommitdiff
path: root/src/ringct/bulletproofs.cc (follow)
AgeCommit message (Collapse)AuthorFilesLines
2018-09-24bulletproofs: multiply points by 8 first thing in verificationmoneromooo-monero1-15/+17
instead of merging that with other scalar multiplications where possible for speed, since this is not actually safe
2018-09-11bulletproofs: #include <openssl/bn.h>moneromooo-monero1-0/+1
Apparently needed for openssl 1.1.x
2018-09-11bulletproofs: speed up the latest changes a bitmoneromooo-monero1-32/+36
2018-09-11bulletproofs: scale points by 8 to ensure subgroup validitymoneromooo-monero1-16/+28
2018-09-11bulletproofs: match aggregated verification to sarang's latest prototypemoneromooo-monero1-64/+39
2018-09-11ringct: error out when hashToPoint* returns the point at infinitymoneromooo-monero1-1/+3
Reported by QuarksLab.
2018-09-11bulletproofs: reject x, y, z, or w[i] being zeromoneromooo-monero1-2/+63
Also try again when we're generate a proof with those characteristics Reported by QuarksLab.
2018-09-11bulletproofs: a few fixes from the Kudelski reviewmoneromooo-monero1-3/+20
- fix integer overflow in n_bulletproof_amounts - check input scalars are in range - remove use of environment variable to tweak straus performance - do not use implementation defined signed shift for signum
2018-09-11bulletproofs: reject points not in the main subgroupmoneromooo-monero1-0/+13
2018-09-11bulletproofs: speed up a few multiplies using existing Hi cachemoneromooo-monero1-2/+11
2018-09-11Add Pippenger cache and limit Straus cache sizemoneromooo-monero1-9/+20
2018-09-11Pippenger multiexpmoneromooo-monero1-3/+3
Based on sarang's python code
2018-09-11precalc the ge_p3 representation of Hmoneromooo-monero1-11/+11
2018-09-11Add a define for the max number of bulletproof multi-outputsmoneromooo-monero1-1/+2
2018-09-11multiexp: some speedupsmoneromooo-monero1-1/+2
- use a raw memory block to store cache - use aligned memory - use doubling API where appropriate - calculate straus in bands
2018-09-11bulletproofs: add aggregated verificationmoneromooo-monero1-175/+219
Ported from sarang's java code
2018-09-11make straus cached mode thread safe, and add tests for itmoneromooo-monero1-2/+9
2018-09-11add Straus multiexpmoneromooo-monero1-143/+47
2018-09-11ringct: add bos coster multiexpmoneromooo-monero1-51/+154
2018-09-11bulletproofs: misc optimizationsmoneromooo-monero1-23/+87
Use double mults where possible, avoid conversions, simplify
2018-09-11bulletproofs: multi-output bulletproofsmoneromooo-monero1-32/+316
2018-01-31bulletproofs: more robust challenge computationmoneromooo-monero1-56/+47
Changes from sarang, from a recommendation by an anonymous reviewer
2018-01-26Readd copyright starting datexmr-eric1-1/+1
2018-01-26Update 2018 copyrightxmr-eric1-1/+1
2017-12-08bulletproofs: switch H/G in Pedersen commitments to match rctmoneromooo-monero1-13/+14
Changes from sarang
2017-12-08add bulletproofs to the build, with basic unit testsmoneromooo-monero1-0/+760
Based on Java code from Sarang Noether