monzero-core.git/src/ringct/bulletproofs.cc, branch v0.13.0.2 Monzero core node, command-line wallet, consensus code, and release tooling. https://code.monzero.org/monzero-core.git/atom?h=v0.13.0.2 2018-09-24T14:02:51Z bulletproofs: multiply points by 8 first thing in verification 2018-09-24T14:02:51Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2018-09-24T14:01:33Z urn:sha1:1dd5c73f62edc9edc54f46bbff2f5eb43ee9a0e0 instead of merging that with other scalar multiplications where possible for speed, since this is not actually safe bulletproofs: #include <openssl/bn.h> 2018-09-11T13:38:34Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2018-08-21T15:28:06Z urn:sha1:8f418a6db0953d7a1d0c1dfa24d79f59cef618b7 Apparently needed for openssl 1.1.x bulletproofs: speed up the latest changes a bit 2018-09-11T13:38:32Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2018-08-06T15:21:07Z urn:sha1:2bf636503fa09346b02964b2903ca70579f94c6b bulletproofs: scale points by 8 to ensure subgroup validity 2018-09-11T13:38:31Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2018-08-06T11:05:20Z urn:sha1:044dff5a30deb05f5236f36ebae5e671d15ddb4e bulletproofs: match aggregated verification to sarang's latest prototype 2018-09-11T13:38:30Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2018-08-06T10:09:46Z urn:sha1:c83012c47654d05ca6b045c3942d3e57da6ad199 ringct: error out when hashToPoint* returns the point at infinity 2018-09-11T13:38:16Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2018-07-25T09:10:46Z urn:sha1:7ed496cc780489f9bb8fe13c4d97885666e0dfaf Reported by QuarksLab. bulletproofs: reject x, y, z, or w[i] being zero 2018-09-11T13:38:08Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2018-07-24T18:56:48Z urn:sha1:fe0fa3b9c5098ae61f9c60ddc9f1f3dd5b008ec6 Also try again when we're generate a proof with those characteristics Reported by QuarksLab. bulletproofs: a few fixes from the Kudelski review 2018-09-11T13:38:05Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2018-07-16T13:40:51Z urn:sha1:869b3bf824387ae50ab28be9bce66caae21bcae9 - fix integer overflow in n_bulletproof_amounts - check input scalars are in range - remove use of environment variable to tweak straus performance - do not use implementation defined signed shift for signum bulletproofs: reject points not in the main subgroup 2018-09-11T13:38:04Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2018-06-29T14:03:00Z urn:sha1:c42917624849daeac0b4bc2fb1cd1f2539470b28 bulletproofs: speed up a few multiplies using existing Hi cache 2018-09-11T13:38:03Z moneromooo-monero moneromooo-monero@users.noreply.github.com 2018-06-20T15:54:13Z urn:sha1:15697177183db06b31a73d45a4e8406eaaa4cf5b