--- layout: post title: Logs for the Monero Research Lab Meeting Held on 2018-11-19 summary: Surae work, Sarang work, and miscellaneous tags: [dev diaries, crypto, research] author: el00ruobuob / surae --- # Logs **\** heyo **\** hello **\** Hi surae! **\** good timing :D **\** hi **\** i decided to not look at screens this weekend, because i got like 5 migraines last week, and i made it from the hours of 8am saturday to 1pm saturday **\** but i still felt like a totally new person :D **\** anyone have any questions before we begin? **\** Welcome suraeNewther **\** nice **\** \\nick suraEyeOfNewt **\** damn **\** s/\\\\/\\// **\** Shall we begin? **\** omg that should be on a t-shirt with MRL's logo **\** yes **\** how many rings can a ring signature ring if a ring signature can ring rings? **\** let's begin **\** that's actually the subtitle of nick van saberhagen's autobiography **\** Who shall start with updates? **\** Allright, we've gotten greetings out of the way. Sarang: how is that timing code going? still on iteration 18? **\** Nope, 19 **\** Sarang is currently running some timing experiments for me on matching bipartite graphs **\** okay, for it to complete 20, i estimate it will be done in mid december, so i say we don't fall prey to the sunk cost fallacy **\** i'm going to re-rig the code and run it over a smaller sample of the parameter space and get some results **\** Want to give your update suraeNoether first? **\** cool **\** Getting some hard numbers with scaling information will be useful **\** Sure: Right now my time is being spent describing this bipartite matching graph problem that traceability problems in monero boil down to **\** very useful **\** having a complete description in terms of graph theory is marvelous to have **\** the idea is simple. if someone were to try to trace the monero blockchain, they would at least have to perform the following matching task. that sort of idea **\** and we have known bounds on the complexity for that matching task **\** Exactly, and now some code to get an idea of scaling **\** at least order of magnitude **\** this is all in the pursuit of a formal model of de-anonymizing a "mixing with an anonymity set" style anonymity system like that of Monero. **\** i've begun writing how we can use this approach + zcash turnstile to place bounds on the difficulty of de-anonymizing zcash as well **\** i should have a draft of the monero portion of this paper done by the end of November **\** sexxy **\** sarang has already seen it and (if i do say so myself) it's a pretty fun paper actually **\** Very much so **\** if it wasn't for the fact that's \*criticizing\* monero just like MRL-0001, i'd be very excited about writing it **\** Have you informed Zcash of the possible applicability to their project, so they can draft a blog post about it? =p **\** i'm confident that this will make monero better, however, by formalizing some of our concerns that were previously only qualitative **\** sarang not formally, i may have brought it up with zooko in person before **\** any way I can get a draft copy? **\** We should be good neighbors and let them know **\** sgp\_: it's all super early **\** sgp\_: yes, i actually want your thoughts becauset his is relevant to pools and mining and i want your recommendations, too, sgp **\** cool **\** so, that's my MRL update. Sarang, what have you been up to? **\** A few things **\** First, housekeeping for monero-site updates to migrate our papers over, and add the new ones **\** Second, more lit review on graph theory approaches to anonymity **\** Third, reviewing some other papers relating to ring sigs and zk proving **\** Fourth, fixing and writing up a cross-curve discrete log equality proving system **\** there's also working toy code for that, using ed25519 and ed448 **\** This allows you to use "discrete log preimages" across curves or groups arbitrarily **\** provided the spaces are big enough (they are) **\** Here's the writeup, for those curious: https://v2.overleaf.com/read/jcyscybzhzmy **\** Note that I did not invent this, but this is the first correct writeup I've seen and I wanted one for completeness **\** That's about it for me **\** sarang has been on fire btw **\** As in, running around with my hair on fire, sure! **\** if you guys haven't noticed, he's implemented several toy implementations of various crypto schemes in the past two months alone **\** you have hair? **\** Not anymore, it burned off **\** nice **\** So going forward, this paper (and others) will be on getmonero.org **\** A few newer papers are in the PR pipeline **\** Questions on any of my stuff? **\** the only other topics on my mind are only half research-related: 1) research: the post-thanksgiving Monero face-to-face being hosted by Tari bringing sarang and endogenic and i together in Nashville again... I heard a rumor someone else important was coming :D 2) not really research: the coin center privacy workshop in December I'm considering attending, 3) research: the Monero Konferenco, and... **\** well, the last bit is related to my nonprofit whihc is a selfish thing to bring up so I'll leave that alone **\** too l8 **\** bring it up anyway **\** heh **\** okay **\** so, for 1) as folks may know, Tari has paid the expenses required to get sarang, endogenic, and i face to face for a meeting before... and they are doing it again, and it is looking like it may become a quarterly thing **\** I suspect funding may be stalled a bit while belts tighten :/ **\** oh btw i drive in **\** this is largely a research powwow over a few days, at the last meeting this whole bipartite matching thing was initially estimated and it kicked off my current research paper **\** and i should say: it's not just Tari, it's also MyMonero **\** one of these next ones i'm going to try to get surae to stay at my house ^\_^ **\** We aren't burdening the community financially with these meetings, but we also want the community to learn of our financials in this way, to prevent accusations of opacity **\** For 2) I really want to go to this thing on some levels, but i am concerned coin center is going to look to me as a voice of the Monero community. I'm not sure if they want me to come if I'm coming as a private individual not as an individual representing Monero **\** Isthmus was already nice enough to offer a place to stay for me in SFO so the only financial cost would be a plane ticket **\** it seemed to me like folks were lukewarm on the idea of me attending last time I brought it up **\** trying to sense the temperature now that folks have had a week or two to sit on the idea **\** In terms of funding, it seems to have more value for the space as a whole, rather than just for the Monero community **\** I suspect you're right about the "voice of Monero" thing, but I don't know how bad of a thing that is **\** yeah, and I would go on my own dime **\** I remain disappointed that this is a "be in person or don't have a say" thing **\** but that's neither here nor there **\** for 3), the Monero Konferenco: we are sitting almost at 20% funded. https://forum.getmonero.org/8/funding-required/90909/surae-noether-first-denver-monero-konferenco-spring-2019 **\** that's impressive **\** i know, right? **\** that'll be enough to put a deposit down on a location **\** I assume you'll wait until funding is closer to guaranteed before deposits? **\** to the extent possible, that is **\** i'm concerned about waiting until it's totally funded for stuff like that, and I can't think of an easy quick solution. maybe rehrar has some thoughts **\** suraeNoether: I see that there are no milestones in the FFS for payout **\** nioc yeah, we should consider how to structure that asap **\** because a milestone like putting a deposit down on a location requires the money before the milestone occurs **\** I think nioc's point is good particularly because of the natural payouts that are needed for this **\** yeah **\** so perhaps we invert the milestones **\** suraeNoether: what's the downside to waiting, besides the risk of losing venue? **\** i could make a milestone post to request funding to complete a milestone **\** I think that's fine **\** sarang: volatility in price over the long term makes the actual funding receive much more variable **\** There's no independent way for donors to verify the milestones happened anyway **\** unless you posted receipts and such **\** we'll be posting contracts signed with venues and receipts, etc, all of which are very easily faked, unfortunately **\** Yeah, that's unavoidable **\** I think people understand this **\** curious parties could always call the literal venues themselves and check, I suppose **\** Goal should be to maximize transparency and accountability within the limits of the unique circumstances **\** so, how shall we go about doing this? Should I edit the funding request post to include all this information? I feel like that's changing the terms of the request after we received donations already, which isn't necessarily fair to the previous donors **\** As long as you're doing the same things with the money, updating for more clear scheduling seems entirely reasonable **\** sarang: I believe it's up to core not the community to verify receipts **\** since they release the funds **\** nioc: I only mean this in the sense that most funding requests have a tangible, publicly-verifiable work output **\** maybe fluffypony luigi1111 binaryFate or ArticMine could weigh in on this. **\** Whereas this is a bit different **\** not that you couldn't make it public **\** thanks for that observation, sarang **\** okay, i'm going to edit the current funding request post to include a handful of milestones and a description of how we are going to invert the milestone process for this event **\** I think a payout with a clear understanding of what happens with it (e.g. venue deposit) and some kind of immediate transparency for a modicum of verification (e.g. invoices and core team verifies somehow) makes sense **\** Donors likely already implicitly assumed something along these lines **\** The "work output" is a conference next year :) **\** I would look for community agreement if there seemed to be anything "shady" **\** Plus suraeNoether already has to have evidence of this for corporate tax purposes anyway **\** cool cool **\** one milestone can be a deposit on a venue, AV stuff, caterer and (if appropriate) a deal at a hotel so attendees can get a discount. another milestone can be purchase of flights and hotels for speakers. a final milestone can be for the remainder of the cost of the event to pay for things like media, publicity, printing pamphlets and posters, assembling shwag bags, etc **\** thanks for the input luigi1111 i believe you are 100% correct **\** we will be testing a few things at the 35C3 (Monero at the Chaos Communication Congress 27.-30.dec) which could be valuable for the conferenco: submission management, streaming, etc. will let everyone know when there is something to see! **\** we mentioned having defcon-style badges from the hardware team, but i think we are going to hold off on those until the second year. this will keep our costs down and allow the HW team to focus on the wallet, etc **\** ^ good idea, on both counts **\** parasew[m]: regarding the 35c3 conference, if sarang sgp and myself all want to come (I do!) we need to make our post for travel funds this afternoon **\** i'm holding off on renewing my passport until after it so i don't have to worry about not getting my passport back in time **\** rehrar sarang and sgp\_ are you guys still interested in going to 35c3 **\** ? **\** suraeNoether: sure! yes! (my planning got heavily delayed but the stage and everything got confirmed yesterday) **\** I was just checking my schedule yesterday, and it simply will not work for me due to family commitments **\** (the timing of the event is awful) **\** timing indeed is a problem **\** it really is. flights are super expensive on the 26th and 25th in general **\** I had hoped that I could work around the family stuff, but it's not possible **\** Plus my brother, sarangbro, is expecting a kiddo during that week **\** very exciting **\** nice name **\** ikr **\** we welcome sarangbrokid **\** in olden tymes, they'd have invented a new last name, like sarangson **\** best wishes to sarangbro+sarangbro\_junior! :) **\** yes :D **\** BTW, IACR has been chock full of interesting relevant papers lately **\** yes. yes it ihas. **\** I have a long list for this week **\** I try to hit up lit review weekly but some weeks it gets just bonkers there **\** btw **\** everyone, i really think sarang needs a vacation **\** like five days of no computer screens and some sun or something, and he barely takes weekends off **\** sarang is a very driven person **\** psh, do any of us? **\** ikr **\** It's like Newman, who once opined that the mail never stops **\** thing is, you see Ethereum people on twitter bragging about working 18 hours a day and you know they are producing some straight up crap in those conditions. **\** I suspect many of us will be effectively taking time off around Christmahannukwanzaka **\** for one reason or another **\** OH there is one FFS i would like to direct everyone's attention to **\** ? **\** TheCharlatan is proposing development of reproducible builds here: https://forum.getmonero.org/6/ideas/91098/funding-for-development-of-reproducible-builds **\** outreach? **\** I strongly support this FFS project, and I think it would be a nice security gain for Monero **\** These have been desired for a while **\** So the whole request is for 6 XMR? **\** yep, and i don't think it's out of line with endogenic's recent efforts to encourage reworking/refactoring Monero (i'm almost certainly mischaracterizing Endo's goals) **\** it appears he's only asking us to pay for his VPS **\** I don't know the details of repro build complexity, but that seems like a great deal **\** unless we can get VPS support for free, as some others had indicated **\** ^ he works at Shift, the hardware wallet developer, and he started gridcoin, and admittedly wildly insecure but super fun cryptocurrency experiment **\** or at least, when i met him, he was doing work with Shift **\** anyway **\** I have no further information to report **\** although I'm always interested in getting community feedback in general **\** cool **\** Any other fun news to report **\** ? **\** aha, so MAGIC received its first non-board member donation today, so I'm totally energized to encourage folks interested in contributing to MAGIC to check out what we are about at https://www.magicgrants.org ... we are an educational and scientific non-profit focused on scholarships and research grants in cryptocurrencies. **\** our scholarship program will be open starting in January and we are currently fundraising for next year **\** if we were in a bubble I'd say "hey, come reduce your tax burden possibly" but I'm fully aware of the current state of the market. :P **\** lol **\** this is amazing, congrats for magic! **\** I must take off shortly to meet up with someone **\** thank you! hopefully we can reduce the financial burden of studying cryptocurrencies for students while also incentivizing universities to make cryptocurrency curricula **\** and eventually? build primary schools, libraries, and computer labs in the developing world **\** can't have a crypto infrastructure without comptuers (technically a false statement, but theory and practice disagree here :P) **\** but since that's not research related and is a coin-agnostic project, it may be one of the last times I bring it up during an MRL research meeting **\** okay **\** i believe we are good to go on today's meeting **\** EVERYONE. you must know this: i love you