Does anyone know if device secret scalars are homomorphic? I'm updating my legacy utils to pipe in the `hwdev` thing, but this method requires adding two scalars: github.com/UkoeHB/monero/blob/13c32…phis_core/legacy_core_utils.cpp#L89

oh nvm found sc_secret_add()

It's strange to me that apparently everything related to balance recovery and signing txs is implemented in devices. Is it expected that seraphis full balance recovery will also be implemented in devices? It would be MUCH simpler just to implement the signing piece.

Not really a dev question, but a crypto question. In which context would EC scalar addition not be homomorphic? Maybe if you did addition of scalars and naively rounded off by a power of 2 and not the group order?

well hw device scalars are encrypted and passed around on the control device, it seems those scalars are not homomorphic (which makes sense)

they aren't really scalars at that point anyway

I guess forcing the devices to implement balance recovery is good for those super paranoid who don't even trust the hot device with their non-signing keys

I don't know anything about device cryptography in Monero, though