Michele Orrù

Hey, I just wanted to contribute to the discussion here by saying that a long time ago we had already thought about Mimblewimble with BLS signatures, and we had also...

maybe `Result` instead of `bool` to make sure the compiler complains if you don’t use the result? generally you want these things to fail hard.

I'm working on this in branch `feature/letsencrypt`. There's a bunch of comments marked `XXX` where help would be very much appreciated

Hi! bumping this again because a lot of project effectively need `digest::Digest` to implement `zeroize::Zeroize`. Do you need help with this?

Verification of BLS signatures indeed requires all public keys -- and aggregating them simply by adding up all public keys leads to a rogue key attack. However, if we accept...

@phyro: sorry for the late response to your message. I don't really understand the argument you're trying to bring. You highlight the value of relying on the assumptions that have...

same here

I think the issue that you're point out concerns representation in memory, but here I'm trying to make sure that the byte representation is identical! it seems the reason is...

A similar feature could be achieved statically chaining IOPatterns,but... Marlin-style composition (and this) are not really fit for chaining: protocols with non-unique response chained together may have the same transcript...

@burdges I thought a bit more about composition and I really don't understand the claim. I'm pretty sure any decent protocol can just concatenate IOPatterns before concatenating provers 🥸 I...