serai/coins/monero/src/ringct
Luke Parker a25e6330bd
Remove DLEq proofs from CLSAG multisig
1) Removes the key image DLEq on the Monero side of things, as the produced
   signature share serves as a DLEq for it.
2) Removes the nonce DLEqs from modular-frost as they're unnecessary for
   monero-serai. Updates documentation accordingly.

Without the proof the nonces are internally consistent, the produced signatures
from modular-frost can be argued as a batch-verifiable CP93 DLEq (R0, R1, s),
or as a GSP for the CP93 DLEq statement (which naturally produces (R0, R1, s)).

The lack of proving the nonces consistent does make the process weaker, yet
it's also unnecessary for the class of protocols this is intended to service.
To provide DLEqs for the nonces would be to provide PoKs for the nonce
commitments (in the traditional Schnorr case).
2024-04-21 23:01:32 -04:00
..
bulletproofs Slight tweaks to BP+ 2024-04-21 21:51:44 -04:00
clsag Remove DLEq proofs from CLSAG multisig 2024-04-21 23:01:32 -04:00
borromean.rs Monero: add more legacy verify functions (#383) 2023-11-12 10:18:18 -05:00
hash_to_point.rs Monero: add more legacy verify functions (#383) 2023-11-12 10:18:18 -05:00
mlsag.rs Monero: use only the first input ring length for RCT deserialization. (#504) 2024-01-05 00:02:16 -05:00
mod.rs Monero: use only the first input ring length for RCT deserialization. (#504) 2024-01-05 00:02:16 -05:00