<t​otal.calitabby.death:catgirl.cloud> CRISPY IS A PEDO TROON FAGGOT

<t​otal.calitabby.death:catgirl.cloud> CRISPY IS A PEDO TROON FAGGOT

<t​otal.calitabby.death:catgirl.cloud> CRISPY IS A PEDO TROON FAGGOT

<c​oincat:matrix.org> Could the moderators please remove this obvious scam? It seems like this chat is dead

<c​oincat:matrix.org> plowsof monerobull

<m​onerobull:matrix.org> On it

<c​oincat:matrix.org> Helios: y^2 = x^3 - 3*x + 15789920373731020205926570676277057129217619222203920395806844808978996083412 over GF(p)

<c​oincat:matrix.org> Selene: y^2 = x^3 - 3*x + 50691664119640283727448954162351551669994268339720539671652090628799494505816 over GF(q)

<c​oincat:matrix.org> Both of these fail the Discriminants, Ladders, Twists, and Completeness checks. Is it safe to use them with the upcoming FCMP++ upgrade for Monero?

<c​oincat:matrix.org> Helios and Selene will be used. I obtained this information from the FCMP++ optimization competition: github.com/j-berman fcmp-plus-plus-optimization-competition/tree/main

<c​oincat:matrix.org> Helios and Selene will be used. I obtained this information from the FCMP++ optimization competition: github.com/j-berman/fcmp-plus-plus-optimization-competition/tree/main

<m​onerobull:matrix.org> jberman:

<m​onerobull:matrix.org> kayabanerve:

<k​ayabanerve:matrix.org> safecurves defines a lot of unnecessary criteria. A small discriminant implies a speedup, and I don't remember the exact discriminant Helios/Selene has off the top of my head, feel free to share coincat, but it doesn't imply a break.

<k​ayabanerve:matrix.org> The lack of existence of a single-coordinate ladder is meaningless. We also can't have one as it requires a cofactor IIRC and we require prime-order curves for security reasons.

<k​ayabanerve:matrix.org> Twist security is meaningless as well. The security model requires small-subgroup/off-curve points don't cause issues. We don't have small subgroups in our curves and we reject off-curve points. Which specific twist criteria do we fail again?

<k​ayabanerve:matrix.org> As for completeness, we do have complete point addition formulas.

<k​ayabanerve:matrix.org> I reviewed this several months ago FWIW, hence why I don't immediately recall some of these points.