02:18:19 <m-relay> <t​otal.calitabby.death:catgirl.cloud> CRISPY IS A PEDO TROON FAGGOT
02:18:24 <m-relay> <t​otal.calitabby.death:catgirl.cloud> CRISPY IS A PEDO TROON FAGGOT
02:18:29 <m-relay> <t​otal.calitabby.death:catgirl.cloud> CRISPY IS A PEDO TROON FAGGOT
08:18:22 <m-relay> <c​oincat:matrix.org> Could the moderators please remove this obvious scam? It seems like this chat is dead
08:20:40 <m-relay> <c​oincat:matrix.org> plowsof monerobull
08:42:17 <m-relay> <m​onerobull:matrix.org> On it
08:42:43 <m-relay> <c​oincat:matrix.org> Helios: y^2 = x^3 - 3*x + 15789920373731020205926570676277057129217619222203920395806844808978996083412 over GF(p)
08:42:44 <m-relay> <c​oincat:matrix.org> Selene: y^2 = x^3 - 3*x + 50691664119640283727448954162351551669994268339720539671652090628799494505816 over GF(q)
08:42:46 <m-relay> <c​oincat:matrix.org> Both of these fail the Discriminants, Ladders, Twists, and Completeness checks. Is it safe to use them with the upcoming FCMP++ upgrade for Monero?
08:47:14 <m-relay> <c​oincat:matrix.org> Helios and Selene will be used. I obtained this information from the FCMP++ optimization competition: https://github.com/j-berman fcmp-plus-plus-optimization-competition/tree/main
08:47:26 <m-relay> <c​oincat:matrix.org> Helios and Selene will be used. I obtained this information from the FCMP++ optimization competition: https://github.com/j-berman/fcmp-plus-plus-optimization-competition/tree/main
08:49:30 <m-relay> <m​onerobull:matrix.org> jberman:
08:49:35 <m-relay> <m​onerobull:matrix.org> kayabanerve:
10:08:51 <m-relay> <k​ayabanerve:matrix.org> safecurves defines a lot of unnecessary criteria. A small discriminant implies a speedup, and I don't remember the exact discriminant Helios/Selene has off the top of my head, feel free to share coincat, but it doesn't imply a break.
10:08:52 <m-relay> <k​ayabanerve:matrix.org> The lack of existence of a single-coordinate ladder is meaningless. We also can't have one as it requires a cofactor IIRC and we require prime-order curves for security reasons.
10:08:54 <m-relay> <k​ayabanerve:matrix.org> Twist security is meaningless as well. The security model requires small-subgroup/off-curve points don't cause issues. We don't have small subgroups in our curves and we reject off-curve points. Which specific twist criteria do we fail again?
10:08:56 <m-relay> <k​ayabanerve:matrix.org> As for completeness, we do have complete point addition formulas.
10:09:22 <m-relay> <k​ayabanerve:matrix.org> I reviewed this several months ago FWIW, hence why I don't immediately recall some of these points.
15:59:17 <voidlinux> Hi guys, is matrix server (monero.social) is down? I can not connect it.
16:23:26 <plowsof> Matrix will be back up soon voidlinux 
16:25:19 <SyntheticBird> LETS GO
16:32:37 <voidlinux> I thought server closed forever. Thanks plowsof.
16:32:52 <m-relay> <k​ayabanerve:matrix.org> Also, further note re: twists, the relevant concern would be transfers and we do have security there.