monzero-core.git/src/ringct/rctSigs.h, branch v0.10.2Monzero core node, command-line wallet, consensus code, and release tooling.
https://code.monzero.org/monzero-core.git/atom?h=v0.10.22017-01-14T21:17:32Zrct: split rct checks between semantics and other2017-01-14T21:17:32Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2017-01-14T13:29:08Zurn:sha1:ba3968f6ce0459f0c0a767e4f54e7cb2c48955d9
Semantics can be checked early
ringct: switch to Borromean signatures2016-12-04T21:54:11ZShen NoetherShen.Noether@gmx.com2016-11-17T23:17:21Zurn:sha1:76958fc75abc18c928474eea91ac05fd5e0fcb41ringct: remove unneeded type conversions2016-10-15T10:58:39Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2016-10-11T18:29:36Zurn:sha1:e06a4daf334ebb8e6f114aadd475ef7816fe3d00ringct: use const refs as parameters where appropriate2016-10-08T21:16:23Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2016-10-08T21:16:23Zurn:sha1:3126ba74255a647eb31c961d029c37538feb3cc7ringct: pass structure by const ref, not value2016-08-28T20:30:51Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2016-08-27T21:20:45Zurn:sha1:b38452bd55134e03948a82a6590b58f55e152f97rct amount key modified as per luigi1111's recommendations2016-08-28T20:30:19Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2016-08-10T11:48:20Zurn:sha1:d4b62a1e295a7fb19de6081733b1d8e0610cbf08
This allows the key to be not the same for two outputs sent to
the same address (eg, if you pay yourself, and also get change
back). Also remove the key amounts lists and return parameters
since we don't actually generate random ones, so we don't need
to save them as we can recalculate them when needed if we have
the correct keys.
rct: rework the verification preparation process2016-08-28T20:30:16Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2016-08-09T10:38:54Zurn:sha1:d93746b6d37dd5b99d16331ec8e24e8a1f7e4652
The whole rct data apart from the MLSAGs is now included in
the signed message, to avoid malleability issues.
Instead of passing the data that's not serialized as extra
parameters to the verification API, the transaction is modified
to fill all that information. This means the transaction can
not be const anymore, but it cleaner in other ways.
rct: avoid the need for the last II element2016-08-28T20:30:12ZShen NoetherShen.Noether@gmx.com2016-08-08T11:54:00Zurn:sha1:c5be4b0beaaa7a703d4e2b84aa9f3c727bf992df
This element is used in the generation of the MLSAG, but isn't
needed in verification.
Also misc changes in the cryptonote code to match, by mooo.
rct: make the amount key derivable by a third party with the tx key2016-08-28T20:29:46Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2016-07-24T16:53:34Zurn:sha1:9b70856ccb97943249f6e76b19f8abce5cd7aabe
Scheme design from luigi1114.
rct: do not serialize public keys in outPk2016-08-28T20:29:43Zmoneromooo-moneromoneromooo-monero@users.noreply.github.com2016-07-23T11:09:33Zurn:sha1:cf33e1a52a0cf20a7cec619d85d68f000b2e1f40
They can be reconstructed from vout