00:00:11 Ah, nevermind, found [crypto_core_ed25519_scalar_reduce](https://libsodium.gitbook.io/doc/advanced/point-arithmetic#scalar-arithmetic-over-l) 00:00:39 It seems that Ristretto255 uses Curve25519, which just uses a different elliptic curve equation? 00:03:15 recanman: Curve25519 and Ed25519 are birationally equivalent to each other. 00:03:15 Ristretto is a prime-order group over the same field as Curve25519 and Ed25519, which can be implemented as an abstraction over Ed25519. 00:03:33 So, with some exceptions, Curve25519 will work when working with Cryptonote addresses? 00:04:11 Oh, over the same field. Just to confirm, this makes it 'compatible' with Ed25519 00:04:17 Oh, over the same field. Just to confirm, this makes it 'compatible' with Ed25519? 05:53:17 selsta: Any rough timeline on the .4 release? 13:16:47 dEBRUYNE: I would like to release it until end of month but it depends on when there are merges and if things will get reviewed in time 14:57:46 selsta: ty 14:58:27 i would like to include this but it's a huge change and I'm worried about it introducing new bugs https://github.com/monero-project/monero/pull/9135 14:58:39 might make sense to let it run on some nodes first 14:59:08 Worthwhile to keep it for a later release imo 18:24:49 i have a question regarding monero ring signatures and outputs. Anyone can help ? 18:26:51 Let's say I have 2 outputs of 0.4 XMR in my wallet, for a total balance of 0.8 XMR, and I attempt to make a payment for 0.41 XMR. Will my input take 2 ring signatures out of the 16 ring signatures ? 18:26:53 What will happen with the change I get back of 0.39 XMR ? will it be a brand new output that nobody knows ? 19:06:58 For the first point, I think every used output gets it's own ring signature 19:36:50 as for the second question, the change output will be a newly created one, but the recipient of the same transaction knows that the change belongs to you 19:38:02 they have the pubkey although they can't read the amount