fe0fa3b9c5
bulletproofs: reject x, y, z, or w[i] being zero
...
Also try again when we're generate a proof with those characteristics
Reported by QuarksLab.
6 years ago
869b3bf824
bulletproofs: a few fixes from the Kudelski review
...
- fix integer overflow in n_bulletproof_amounts
- check input scalars are in range
- remove use of environment variable to tweak straus performance
- do not use implementation defined signed shift for signum
6 years ago
c429176248
bulletproofs: reject points not in the main subgroup
6 years ago
1569717718
bulletproofs: speed up a few multiplies using existing Hi cache
6 years ago
0b05a0fa74
Add Pippenger cache and limit Straus cache size
6 years ago
263431c486
Pippenger multiexp
...
Based on sarang's python code
6 years ago
1b867e7f40
precalc the ge_p3 representation of H
6 years ago
7e67c52fa2
Add a define for the max number of bulletproof multi-outputs
6 years ago
126196b017
multiexp: some speedups
...
- use a raw memory block to store cache
- use aligned memory
- use doubling API where appropriate
- calculate straus in bands
6 years ago
bacf0a1e2f
bulletproofs: add aggregated verification
...
Ported from sarang's java code
6 years ago
e895c3def1
make straus cached mode thread safe, and add tests for it
6 years ago
939bc22332
add Straus multiexp
6 years ago
9ff6e6a0a7
ringct: add bos coster multiexp
6 years ago
e9164bb38b
bulletproofs: misc optimizations
...
Use double mults where possible, avoid conversions, simplify
6 years ago
aacfd6e370
bulletproofs: multi-output bulletproofs
6 years ago
3f1a3fac00
bulletproofs: more robust challenge computation
...
Changes from sarang, from a recommendation by an anonymous reviewer
6 years ago
84a7f6a482
Readd copyright starting date
6 years ago
18216f19dd
Update 2018 copyright
6 years ago
8620ef0a0d
bulletproofs: switch H/G in Pedersen commitments to match rct
...
Changes from sarang
7 years ago
90b8d9f271
add bulletproofs to the build, with basic unit tests
...
Based on Java code from Sarang Noether
7 years ago
moneromooo-monero
xmr-eric