sipa changed the topic of #bitcoin-wizards to: This channel is for discussing theoretical ideas with regard to cryptocurrencies, not about short-term Bitcoin development | http://bitcoin.ninja/ | This channel is logged. | For logs and more information, visit http://bitcoin.ninja
mcorpgc has quit []
marcoagner has quit [Ping timeout: 246 seconds]
tromp has quit [Remote host closed the connection]
jeremyrubin has quit [Ping timeout: 240 seconds]
jeremyrubin has joined #bitcoin-wizards
Usurp has joined #bitcoin-wizards
queip_ has joined #bitcoin-wizards
queip has quit [Ping timeout: 240 seconds]
queip_ is now known as queip
jeremyrubin has quit [Ping timeout: 265 seconds]
tromp has joined #bitcoin-wizards
tromp has quit [Ping timeout: 246 seconds]
queip has quit [Ping timeout: 250 seconds]
queip has joined #bitcoin-wizards
queip has quit [Ping timeout: 250 seconds]
queip has joined #bitcoin-wizards
AaronvanW has quit []
devrando1 has quit [Ping timeout: 250 seconds]
TheoStorm has joined #bitcoin-wizards
devrando1 has joined #bitcoin-wizards
devrando1 has quit [Ping timeout: 250 seconds]
dr-orlovsky has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
riclas has quit [Ping timeout: 240 seconds]
DougieBot5000_ is now known as DougieBot5000
Belkaar_ has quit [Ping timeout: 240 seconds]
Belkaar has joined #bitcoin-wizards
Belkaar has quit [Changing host]
Belkaar has joined #bitcoin-wizards
Usurp has quit []
TheoStorm has quit [Quit: Leaving]
jeremyrubin has joined #bitcoin-wizards
RD has joined #bitcoin-wizards
RD is now known as Guest20380
slivera has quit [Remote host closed the connection]
belcher has quit [Ping timeout: 240 seconds]
jeremyrubin has quit [Ping timeout: 265 seconds]
queip has quit [Ping timeout: 265 seconds]
queip has joined #bitcoin-wizards
belcher has joined #bitcoin-wizards
rusty has quit [Quit: Leaving.]
jtimon has quit [Remote host closed the connection]
justanotheruser has quit [Ping timeout: 245 seconds]
queip has quit [Ping timeout: 240 seconds]
queip has joined #bitcoin-wizards
_whitelogger has joined #bitcoin-wizards
queip has quit [Ping timeout: 240 seconds]
queip has joined #bitcoin-wizards
rusty has joined #bitcoin-wizards
superkuh has quit [Quit: the neuronal action potential is an electrical manipulation of reversible abrupt phase changes in the lipid bilayer]
queip has quit [Ping timeout: 250 seconds]
queip has joined #bitcoin-wizards
Guest20380 has quit []
rusty has quit [Quit: Leaving.]
tromp has joined #bitcoin-wizards
queip has quit [Ping timeout: 265 seconds]
queip has joined #bitcoin-wizards
slivera has joined #bitcoin-wizards
tromp has quit [Remote host closed the connection]
rh0nj has quit [Remote host closed the connection]
rh0nj has joined #bitcoin-wizards
James_F1 has joined #bitcoin-wizards
justanotheruser has joined #bitcoin-wizards
tromp has joined #bitcoin-wizards
queip has quit [Ping timeout: 240 seconds]
queip has joined #bitcoin-wizards
queip has quit [Ping timeout: 265 seconds]
queip has joined #bitcoin-wizards
ppartyix has joined #bitcoin-wizards
queip has quit [Ping timeout: 265 seconds]
ppartyix has quit [Read error: Connection reset by peer]
queip has joined #bitcoin-wizards
<tromp>
ZmnSCPxj ’s commitment poposal COM(X) = (y*G + z*H, y*G + X) where y and z are random and the opening is (y,z,X) seems non-binding, as you can also open to any <y,z+i,X+i*H>
queip has quit [Ping timeout: 252 seconds]
marcoagner has joined #bitcoin-wizards
Belkaar has quit [Read error: Connection reset by peer]
queip has joined #bitcoin-wizards
Belkaar has joined #bitcoin-wizards
Belkaar has quit [Changing host]
Belkaar has joined #bitcoin-wizards
queip has quit [Ping timeout: 245 seconds]
queip has joined #bitcoin-wizards
queip_ has joined #bitcoin-wizards
James_F1 has quit []
queip has quit [Ping timeout: 268 seconds]
queip_ is now known as queip
justanotheruser has quit [Ping timeout: 276 seconds]
jungly has joined #bitcoin-wizards
queip has quit [Ping timeout: 246 seconds]
queip has joined #bitcoin-wizards
lowentropy has quit [Ping timeout: 260 seconds]
lowentropy has joined #bitcoin-wizards
queip has quit [Ping timeout: 240 seconds]
queip has joined #bitcoin-wizards
queip has quit [Ping timeout: 265 seconds]
morcos has quit [Ping timeout: 260 seconds]
Socoro has joined #bitcoin-wizards
Zenton has joined #bitcoin-wizards
nitind1 has joined #bitcoin-wizards
morcos has joined #bitcoin-wizards
nijynot has joined #bitcoin-wizards
TheoStorm has joined #bitcoin-wizards
AaronvanW has joined #bitcoin-wizards
dr-orlovsky has joined #bitcoin-wizards
jonatack__ has joined #bitcoin-wizards
jonatack_ has quit [Ping timeout: 250 seconds]
justanotheruser has joined #bitcoin-wizards
<aj>
tromp: given A,B,x,y if A=y*G+z*H, then if you know another x',y' st A=x'*G+y'*H then you've found the discrete log of H (y'-y)*H=(x-x')*G; and if you don't there's only one value of X you can get namely X=B-y*G
<aj>
er, A=x*G+y*H even
<tromp>
yes, Pedersen commitments are computationally binding
<tromp>
but ZmnSCPxj's differs from those
<aj>
tromp: not sure i follow; the COM() you quoted/critiqued was from Lloyd Fournier's post wasn't it?
<waxwing>
i haven't read the post but what you wrote there doesn't look right tromp . if you attempt to open that commitment to <y, z+i, X+iH> the two points you get don't equal (yG+zH, yG+X). what you said would only make sense if those two points were added together.
<waxwing>
i presume the commitment (like elgamal) involves committing to two points, not one? i guess i should actually read it :)
dr-orlovsky has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<waxwing>
it makes sense to me as a solution to the problem (being: how to commit to a *point*, not a scalar): first, blind the point X with a tweak y, so (yG + X), then commit to y with a standard Pedersen commitment to y.
jungly has quit [Ping timeout: 276 seconds]
nijynot has quit [Read error: Connection reset by peer]
nijynot has joined #bitcoin-wizards
riclas has joined #bitcoin-wizards
<tromp>
sorry; my bad (math)
nitind1 has quit []
<tromp>
in repentance, let me try point out some typos in waxwing's excellent "From Zero (Knowledge) to Bulletproofs"
<tromp>
on page 23, there are four lines using x . dy . y . dx instead of x . dy + y . dx
<tromp>
waxwing, how do you compute z there without having x . dy + y . dx available?
DrHaribo1 has joined #bitcoin-wizards
<waxwing>
i'll keep my mouth shut next time lol
<waxwing>
(seriously though thanks, could you open an issue/PR on the github repo if you find typos?)
nir has joined #bitcoin-wizards
slivera has quit [Quit: Leaving]
jonatack__ has quit [Read error: Connection reset by peer]