01:31:42 guess it is time to get back into Monero. Spent a couple years doing my own thing on the side and learned a lot. 01:31:58 c++ is callin my name again 06:47:01 Welcome back! 13:58:17 vtnerd: not sure if you've seen or not, but BIP324 may be relevant to your work on e2ee of p2p comms: https://gist.github.com/dhruv/5b1275751bc98f3b64bcafce7876b489#Abstract 13:59:48 Initial associated PR: https://github.com/bitcoin/bitcoin/pull/18242 14:00:08 Might be useless, but as they're working on a similar protocol change at the same time figured I'd share to be sure it was known 🙂 14:09:49 For anyone who is willing and able to implement this into Monero, I will give a 5XMR bounty for it's inclusion into the codebase via an accepted PR: https://github.com/monero-project/research-lab/issues/73 14:09:50 This is the best way to get over a key UX hurdle in Monero, and seems to have no drawbacks other than the implementation necessary. 14:17:13 > <@sethsimmons:monero.social> For anyone who is willing and able to implement this into Monero, I will give a 5XMR bounty for it's inclusion into the codebase via an accepted PR: https://github.com/monero-project/research-lab/issues/73... (full message at https://libera.ems.host/_matrix/media/r0/download/libera.chat/7327c4c5ef5aeade87cc89ae9eb7d60ca7499baf) 15:01:06 Anyone have thoughts on SipHash for computing view tags? It was recommended to me https://github.com/veorq/SipHash 15:20:44 Already up to 15XMR 😎 15:21:02 UkoeHB it's better to use keccak (cn_fast_hash in Monero codebase IIRC) 15:21:11 no need to add one more hash just for one thing 15:25:01 sech1: the point is it might be way faster, which allows some speedup on view scanning 15:25:09 I will do some tests today 15:25:28 you're optimizing 1% of the total time, the rest is scalar mult 15:25:35 and other crypto operations 15:25:42 it might be 3% 15:25:59 so, I will test 15:26:08 since this SipHash is very trivial to use 15:27:25 is it cryptographically secure? 15:27:41 ok, it is 15:28:05 we also have Blake (in RandomX), it might be also faster 15:28:20 *Blake2 15:28:47 since you'll be testing performance, it makes sense to test everything we have in the codebase already 15:30:32 I will take a look 16:05:35 .merge+ 8029 8030 16:05:35 Added 16:27:20 so for anyone curious ... I did some tests with LMDB on NFS, which appeared to work, but ... 16:27:49 it looks like mmap'ing stuff permanently ate up RAM, possibly in the nfs daemons 16:28:34 so the NFS server started OOM killing things even though top showed none of them were big memory consumers 16:28:58 and top didn't show *any* big memory consumers. but 3GB went up in smoke till reboot. 18:33:54 How can monero completely replace cash, what property it should be given such that it becomes a full substitute for cash. One area is the fluctuations in price need to be stabilized. Can't it be tethered to say gold reserves? 18:35:49 Crash is not tethered to gold reserves anyway. But one of the big problems is reliance on electricity. 18:36:05 You can give someone cash if the power's off. 18:36:58 Crash is also massively parallel. Your ability to transact in cash does not get lessened if there's a sudden massive increase of cash transactions elsewhere in the world. 18:37:21 Cash is also not subject to reorgs and/or 51% attacks. 18:38:06 Cash is more private (assuming the serial numbers aren't read as a matter of course) 18:40:15 I see you asked the same thing in -lounge, that is a more appropriate venue indeed. 18:40:41 Offline moneros can be generated right , like having a dedicated wallet for each monero and then giving it out as a card 18:40:56 Which has the privatekey 18:49:51 So instead of doing transaction on network we just send the card which has the private key? 19:06:05 sech1: is it `blake256_hash()` that you want me to test? 19:07:46 Probably blake2b_{init,update,final} 19:09:32 int blake2b(void *out, size_t outlen, const void *in, size_t inlen, 19:09:32 const void *key, size_t keylen); 19:09:39 oh found it 19:09:44 in monero\external\randomx\src\blake2\blake2.h 19:10:08 the last 2 parameters can be 0 19:44:05 how do I include this into a test? 19:45:04 See tests/performance_tests, make a new file (copy from, eg, cn_fast_hash.h), replace with your hash. 19:45:15 Then call from main.cp 19:46:11 If you want to call the whole wallet2 thing, it's more complex I guess. 19:46:21 I just want blake2b... 19:46:33 Then: See tests/performance_tests, make a new file (copy from, eg, cn_fast_hash.h), replace with your hash. 19:47:13 subaddress_expand.h does call wallet2, you can start off that if you want to call the "is this output for me" thing with various hashes. 19:47:24 no I know how to do all that 19:47:39 I guess blake2 is not exposed to users of randomx 20:13:14 Ok I have perf tests running. Not sure what to do with them. 20:19:56 The tests are in here if anyone wants to look at it closer: https://github.com/UkoeHB/monero/blob/seraphis_perf/tests/performance_tests/view_scan.h. 20:22:03 On my machine: siphash 3.7us, cnhash 4.9us, blake2b 4.1us, view-scan ~72us. So cnhash -> siphash is about 1.5% faster, and cnhash -> blake2b is about 1% faster. 20:22:46 view-scan with 100% view tag failures* 20:33:02 is this on your machine? maybe it would be nice to test this speedup on ARM to verify mobile devices and wallets will also profit 20:33:04 .merge+ 8020 8017 20:33:04 Added 20:33:51 8021, 8023, 8016, 7997 need a review, the first three are easy and the last one is just backporting 20:36:26 atomfried[m]: go for it 20:39:02 i have a raspberry pi with an ARMv8 do you think this will be comparable to mobile phones? 20:40:47 tbh, AIUI siphash is well used/tested on bitcoin so appears a safe enough choice. 20:42:06 I guess it'd need a cryptographer to check whether it'd be the same properties that get exercised in both uses. 20:48:38 atomfried[m]: idk, maybe? lmao' 20:51:19 Most rpi do not have hardwaes AES, and thus suck at PoW verification. 20:51:42 I don't know which variants might have HW AES. Maybe yours does. 20:51:43 hmm ok i guess it would be worthless then 20:51:53 i will check 20:52:09 For mining, certainly useless. 22:34:44 sethsimmons : I was (mostly) aware of that BIP - even commented on a variation of it years ago on bitcoin-dev 22:35:55 or wait this is a different BIP than what I saw previously 22:36:25 a lot of the BIP is working with the existing Bitcoin protocol, which differs from the Monero protocol