Thanks for the response! Does triptych + Arcturus allow for combining of inputs rings (not just signatures) like Omiring? The added anonyimity set if you need more than 1 ring is extremely beneficial if I understand correctly

AFAIK, Arcturus does, but its security proof was found to be incorrect.

It's not clear to me whether this is a fatal blow or if another proof might be theoretically possible.

Was it really? That's a bummer. Were would I be able to find resources about Arcturus's flaw?

jerfo ^

You can "combine rings" in Triptych too. Or CLSAG. Just not in the same way as Omniring or Arcturus do, from a size efficiency standpoint

For Triptych you'd pick some input set for the whole transaction, build separate proofs for each spend using that one input set, and there you go

Batching means you verify efficiently

Arcturus and Omniring had/have size benefits too, but as stated, Arcturus is broken and should not be used in production

Regardless of efficiency, I thought that with the current CLSAG txs that if you wanted to spend n outputs that you need n input rings. But with triptych, you can spend multiple outputs from one ring? Thanks for your time btw. Also thanks @UkoeHB

You can reuse input sets across proofs/signatures if you want

That has the same effect

The question becomes scaling (space and time)

Oh okay I think that makes sense. How does the time/space efficiency compare roughly for a CLSAG proof of 1 ring with 2n members and 2 spends vs 2 rings with n members and 1 spend each?

It would be twice as expensive for verification and storage, because CLSAG does not benefit from batching

OK and likewise, even if Triptych's proofs are log sizes, they also do not benefit from batching?

They do benefit from batching

In terms of verification complexity, that is

You still need one proof per spend

Hi

xmrchain on head with 7760 uptime 4d 18h 44m 10s

hyc: github.com/monero-project/monero/bl…ib/depends/packages/freebsd_base.mk

do you remember how you got to `$(package)_file_name=freebsd-base-$($(package)_version).txz` ?

if I download it from the URL I get base.txz as the file

unless I misunderstand what `$(package)_file_name` is.

forget it, I understand it now

There has been some efforts to restart the monero-community meetings. If people from dev workgroups would like to highlight recent work, plans or updates please attend

monero-project/meta #584