<c​haserene:matrix.org> kayabanerve: do you have an estimate for a 2/2 tx under FCMP+SA+L with and without OVK+FS? I believe the scaling proposal ArticMine is working on considers future transaction sizes as a factor, but las

<c​haserene:matrix.org> ^ sorry everyone, disregard that message. I accidentally tapped Enter it while still searching for the answer (which I did find)

Over in #no-wallet-left-behind (see monero-project/meta #993 ) I proposed implementing a Grootle proof for cryptonote as an intermediate hardfork before Seraphis, inspired by kayabanerve's technique for FCMP. Here is a little gist outlining the proof (which someone else would need to adopt and work on): gist.github.com/UkoeHB/9416da695021b2bc3d79e4ea8c05815d. It would probably allow 32 -

64 size rings without large perf/tx size cost, which would require moving to binned reference sets.

Figuring out multisig for that signature scheme may be a problem, since it uses 1/k. So alternative proof ideas are welcome.

The bottom-line restriction is Grootle layers can be thought of as Schnorr signatures between a signing key selected from a ring and a base point. So there are limited transformations you can make.