<kayabanerve:matrix.org> @jeffro256:monero.social: I wrapped up some maintenance on monero-oxide. I have a deadline I have to do some work by, but after that, my next item with be FCMP++ maintenance including your PRs.

<earthman:unredacted.org> Why is the "Level of Effort" of this audit 2 and "Ripple Labs XRP Ledger Confidential Transfer audit" level 6> > <@jberman> Trail of Bits publicly shared their audit of the FCMP++ integration Phase 1 here: github.com/trailofbits/publications…nerofcmp++crypto-securityreview.pdf

<earthman:unredacted.org> @earthman:unredacted.org: trailofbits/publications #702/files

<earthman:unredacted.org> The audit is not as deep? Less code?

> that, according to the spending preconditions provided by the Monero team, no currently spendable record will be rendered unspendable by the FCMP++ migration

what are the spending preconditions?

it is touched on "Document the exact historical spendable-record requirements." but is that the preconditions provided?

<jeffro256> Basically, all outputs with a valid ed25519 point for the pubkey of order >= l should be spendable, even those of order 2l, 4l, 8l

<jeffro256> We don't care if pubkeys of order 1, 2, 4, or 8 are spendable

as an example, would the wallet with spend priv being a scalar of zero (which has spend pub as the identity), the abbey wallet, be spendable?

not through monero wallet itself I guess, it already has issues, but generally, as it hits some edge cases all about due to the spend pub being the identity

if I don't misremember this would be non-sendable under carrot derivations due to the checks on payment proposals, but I didn't confirm there

maybe it works, I'll test sending some stuff to 9sCrDesy9LK11111111111111111111111111111111112N1GuTZeagfRbbKcALdcZev4QXGGuoLh2x36LhaxLSxCZ3Viua :)

<jeffro256> The wallet could have a spend privkey of 0, that works since one-time extensios are added to make the privkey of the one-time address non-0. But the one-time address couldn't have a total privkey of 0 > <DataHoarder> as an example, would the wallet with spend priv being a scalar of zero (which has spend pub as the identity), the abbey wallet, be spendable?

Yeah, that's understood even on current rules

in carrot-rs I guess that passes is_torsion_free check ofc (identity point multiplied by order is the identity point) and similar one happens on monero C++ code

then I indeed see the torsion clearing and explicit exclusion of the identity happen on just the fcmp++ areas

empirical answer stressnet.p2pool.observer/tx/c56b19…16c5453365b57943b2922f271692d3d6825