Cathie Yun

I added some clarification [here](https://github.com/dalek-cryptography/curve25519-dalek/issues/345#issuecomment-783867535). Hope that helps.

This is a cool development, thanks for sharing! After the paper goes through peer review, I'd be down to include it, maybe under the `yoloproofs` feature guard. @omershlo, do you...

Do you have a proof of security for the updated scheme? Given that in the [previous scheme](https://github.com/dalek-cryptography/bulletproofs/issues/329) I could find a vulnerability within a few minutes, I am a bit...

The code looks good, but I am also wondering the same as above ^ - if we don't mix the different proof sizes, it seems like a some of the...

See https://github.com/dalek-cryptography/bulletproofs/pull/256 (merged), where Oleg implemented approach #1, providing `Option` instead of a closure. Want to give the new API a try and see if that is easier to use?...

Can you clarify what you mean by "secure"? Do you mean to ask if **k** would remain secret with this new construction? In a very handwavey way, if **k =...

The authors have updated the paper (https://eprint.iacr.org/2021/1397.pdf), so the verification equation typo has been fixed. PTAL

very cool - LGTM. I am curious about actual speedup, do you happen to have any benchmark numbers comparing the two? In theory the `O(log(n))` one is faster, but we...