Skip to content
This repository has been archived by the owner on Dec 28, 2023. It is now read-only.

Support new Bulletproof rewind scheme #1

Merged
merged 1 commit into from
Sep 10, 2019
Merged

Conversation

garyyu
Copy link

@garyyu garyyu commented Sep 10, 2019

This PR is a squashed version of mimblewimble#48

It does a few things:

  • Change the BP message from 16 to 20 bytes
  • Only check if first 4 bytes of mu are 0. For legacy proofs the first 4 bytes of the message should also be 0, this will be checked at the wallet level
  • Remove check of gamma*G + v*H == commit, this will be replaced by a re-derivation of the commitment using the recovered amount and message at the wallet level

There are accompanying changes in rust-libsecp and grin that need to be merged at the same time to not break backwards compatibility.

Disable first 8 byte check

Extend message by 4 bytes

Change message to 20 bytes, fix warnings

Update tests

Update benchmark

Allow private nonce for regular bulletproof creation
@garyyu garyyu merged commit 0f9efeb into gottstech:master Sep 10, 2019
@garyyu garyyu deleted the 48 branch September 10, 2019 03:58
garyyu added a commit that referenced this pull request Feb 13, 2020
* Merged in commit (pull request #1)

signature with pedersen commitment as key

* signature with pedersen commitment as key

* refactoring for compliance to ComSig signature spec

* fix the build

* tmp add 2 printf for debug test

* fix the test
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants