sipa changed the topic of #bitcoin-wizards to: This channel is for discussing theoretical ideas with regard to cryptocurrencies, not about short-term Bitcoin development | http://bitcoin.ninja/ | This channel is logged. | For logs and more information, visit http://bitcoin.ninja
schmidty has quit [Ping timeout: 255 seconds]
sanket1729 has joined #bitcoin-wizards
thomasan_ has quit [Remote host closed the connection]
thomasan_ has joined #bitcoin-wizards
thomasan_ has quit [Remote host closed the connection]
tromp_ has quit [Ping timeout: 245 seconds]
schmidty has joined #bitcoin-wizards
tromp has joined #bitcoin-wizards
tromp has quit [Remote host closed the connection]
tromp has joined #bitcoin-wizards
tromp has quit [Remote host closed the connection]
schmidty_ has joined #bitcoin-wizards
schmidty has quit [Ping timeout: 246 seconds]
schmidty_ has quit [Ping timeout: 255 seconds]
thomasan_ has joined #bitcoin-wizards
ddustin has quit [Remote host closed the connection]
<gmaxwell>
Don't be mad once you see that he want it.
<gmaxwell>
waxwing: I believe the name actually comes from a keyring.
<gmaxwell>
(which I never thought made much sense)
setpill has joined #bitcoin-wizards
<gmaxwell>
oh no, the shamir page is as you describe it.
<gmaxwell>
paper
<waxwing>
you mean the source of the naming?
<waxwing>
i didn't even discuss "group signature", i didn't want to get lost in that. wanted to get lost in other stuff :)
<gmaxwell>
you might want to discuss the kind of "ring signature" that has the log(n) scaling... (which I think all are functionally equivilent to a ZKP of validating pubkey membership in a hashtree, and a signature with it)
<waxwing>
oh. sounds interesting. where can i read about that?
AaronvanW has joined #bitcoin-wizards
<gmaxwell>
waxwing: hopefully someone with a memory will reply.
<waxwing>
oh, nice. so you blind the keys, merkle tree them, and then zkp membership and blinding or something.
<waxwing>
did i understand that right, so you don't need to mess around with zkp of hash preimage?
<gmaxwell>
the general ideal is that you have some hashtree (ideally using a hash that is fast in your zkp) over all the keys in the ring. And inside the ZKP you traverse the tree to select a member, then great a reblinding of the key P2. e.g. so you prove P in Tree && P2 = H(P||random)G + P ... then present the ZKP and a signature with the reblinding. OR, if it's cheap enough in your zkp just prove
<gmaxwell>
knoweldge of P's DL directly.
Deinogalerix21 has quit [Quit: WeeChat 2.4]
<waxwing>
oh,so it does need zkp hash preimage, i see. so having to do that a ton probably implies one of your weird ec-based hashes, i take it :)
<gmaxwell>
yea if you want it to be fast...
<gmaxwell>
conceptually you could just use sha256.
<gmaxwell>
There are more direct constructions that don't invoke a general zkp.
<gmaxwell>
But I'm not having luck finding the paper right now.
<gmaxwell>
but they're functionally equal.
<gmaxwell>
maybe faster to verify.
spinza has quit [Quit: Coyote finally caught up with me...]
TheoStorm has joined #bitcoin-wizards
AaronvanW has joined #bitcoin-wizards
spinza has joined #bitcoin-wizards
AaronvanW has quit [Ping timeout: 255 seconds]
DeanGuss has quit [Remote host closed the connection]
schmidty has joined #bitcoin-wizards
DeanGuss has joined #bitcoin-wizards
AaronvanW has joined #bitcoin-wizards
uiuc-slack1 has joined #bitcoin-wizards
booyah_ has joined #bitcoin-wizards
liead has joined #bitcoin-wizards
antanst8 has joined #bitcoin-wizards
Belkaar_ has joined #bitcoin-wizards
hikvontik has joined #bitcoin-wizards
another1 has quit [Ping timeout: 246 seconds]
enemabandit has quit [Ping timeout: 246 seconds]
epscy has quit [Ping timeout: 246 seconds]
Emcy has quit [Ping timeout: 246 seconds]
harrow has quit [Ping timeout: 246 seconds]
jaromil has quit [Ping timeout: 246 seconds]
spinza has quit [Ping timeout: 246 seconds]
instagibbs has quit [Ping timeout: 246 seconds]
recursive has quit [Ping timeout: 246 seconds]
booyah has quit [Ping timeout: 246 seconds]
jaromil has joined #bitcoin-wizards
victorSN has quit [Ping timeout: 255 seconds]
rh0nj has quit [Ping timeout: 255 seconds]
Belkaar has quit [Ping timeout: 255 seconds]
hikvontik_ has quit [Ping timeout: 255 seconds]
adlai has quit [Ping timeout: 255 seconds]
so has quit [Ping timeout: 255 seconds]
TheoStorm has quit [Ping timeout: 255 seconds]
uiuc-slack has quit [Ping timeout: 255 seconds]
antanst has quit [Ping timeout: 255 seconds]
enemaban1it has joined #bitcoin-wizards
jaromil has quit [Changing host]
jaromil has joined #bitcoin-wizards
so_ has joined #bitcoin-wizards
instagibbs has joined #bitcoin-wizards
harrow has joined #bitcoin-wizards
Emcy has joined #bitcoin-wizards
rh0nj has joined #bitcoin-wizards
Emcy has quit [Changing host]
Emcy has joined #bitcoin-wizards
epscy has joined #bitcoin-wizards
recursive has joined #bitcoin-wizards
victorSN has joined #bitcoin-wizards
another1 has joined #bitcoin-wizards
schmidty has quit [Remote host closed the connection]
Emcy has quit [Client Quit]
Emcy has joined #bitcoin-wizards
Emcy has quit [Remote host closed the connection]
Emcy has joined #bitcoin-wizards
schmidty has joined #bitcoin-wizards
schmidty has quit [Changing host]
schmidty has joined #bitcoin-wizards
TheoStorm has joined #bitcoin-wizards
schmidty has quit [Ping timeout: 245 seconds]
TheoStorm has quit [Remote host closed the connection]
spinza has joined #bitcoin-wizards
AaronvanW has quit [Ping timeout: 246 seconds]
AaronvanW has joined #bitcoin-wizards
schmidty has joined #bitcoin-wizards
siom_ has quit [Remote host closed the connection]
schmidty has quit [Ping timeout: 244 seconds]
Guyver2 has quit [Quit: Going offline, see ya! (www.adiirc.com)]
schmidty has joined #bitcoin-wizards
schmidty has quit [Ping timeout: 240 seconds]
Zenton has quit [Read error: Connection reset by peer]
Zenton has joined #bitcoin-wizards
booyah_ has quit [Read error: Connection reset by peer]
booyah_ has joined #bitcoin-wizards
<andytoshi>
real_or_random has a paper about this but i think it's not published yet
<real_or_random>
it's about (something similar to) ring sigs based on bulletproofs... will be public in a few weeks, we just need to make a few final modifiations
rafalcpp_ is now known as rafalcpp
Guyver2 has joined #bitcoin-wizards
phwalkr has joined #bitcoin-wizards
schmidty has joined #bitcoin-wizards
elichai2 has joined #bitcoin-wizards
TheoStorm has joined #bitcoin-wizards
setpill has quit [Quit: o/]
son0p has joined #bitcoin-wizards
rjected has joined #bitcoin-wizards
rjected has quit [Client Quit]
rjected has joined #bitcoin-wizards
rjected has quit [Client Quit]
TheoStorm has quit [Quit: Leaving]
son0p has quit [Remote host closed the connection]
ddustin has quit [Remote host closed the connection]
ddustin has joined #bitcoin-wizards
liead is now known as adlai
ddustin has quit [Remote host closed the connection]
ddustin has joined #bitcoin-wizards
schmidty has quit [Remote host closed the connection]
schmidty has joined #bitcoin-wizards
schmidty has quit [Changing host]
schmidty has joined #bitcoin-wizards
schmidty has quit [Ping timeout: 250 seconds]
enemaban1it has quit [Ping timeout: 255 seconds]
Guyver2 has quit [Quit: Going offline, see ya! (www.adiirc.com)]
schmidty has joined #bitcoin-wizards
schmidty has quit [Changing host]
schmidty has joined #bitcoin-wizards
sanket1729 has joined #bitcoin-wizards
fabianfabian has joined #bitcoin-wizards
Guyver2 has joined #bitcoin-wizards
jungly has quit [Remote host closed the connection]
ddustin has quit [Remote host closed the connection]
ddustin has joined #bitcoin-wizards
thomasan_ has joined #bitcoin-wizards
CryptoDavid has joined #bitcoin-wizards
Aaronvan_ has joined #bitcoin-wizards
AaronvanW has quit [Ping timeout: 244 seconds]
thomasan_ has quit [Remote host closed the connection]
thomasan_ has joined #bitcoin-wizards
Aaronvan_ is now known as AaronvanW
_Sam-- has joined #bitcoin-wizards
rjected has joined #bitcoin-wizards
hikvontik has quit [Quit: Quit]
hikvontik has joined #bitcoin-wizards
<waxwing>
real_or_random, sounds great, i did wonder whether bulletproofs might apply there.