02:02:32 <br-m> <kayabanerve:matrix.org> @jeffro256:monero.social: I wrapped up some maintenance on monero-oxide. I have a deadline I have to do some work by, but after that, my next item with be FCMP++ maintenance including your PRs.
19:08:36 <br-m> <earthman:unredacted.org> Why is the "Level of Effort" of this audit 2 and "Ripple Labs XRP Ledger Confidential Transfer audit" level 6> > <@jberman> Trail of Bits publicly shared their audit of the FCMP++ integration Phase 1 here: https://github.com/trailofbits/publications/blob/master/reviews/2026-07-magicgrants-monerofcmp++crypto-securityreview.pdf
19:08:55 <br-m> <earthman:unredacted.org> @earthman:unredacted.org: https://github.com/trailofbits/publications/pull/702/files
19:09:20 <br-m> <earthman:unredacted.org> The audit is not as deep? Less code?
19:28:36 <DataHoarder> > that, according to the spending preconditions provided by the Monero team, no currently spendable record will be rendered unspendable by the FCMP++ migration
19:28:43 <DataHoarder> what are the spending preconditions?
19:30:02 <DataHoarder> it is touched on "Document the exact historical spendable-record requirements." but is that the preconditions provided?
19:37:35 <br-m> <jeffro256> Basically, all outputs with a valid ed25519 point for the pubkey of order >= l should be spendable, even those of order 2l, 4l, 8l
19:38:05 <br-m> <jeffro256> We don't care if pubkeys of order 1, 2, 4, or 8 are spendable 
19:39:54 <DataHoarder> as an example, would the wallet with spend priv being a scalar of zero (which has spend pub as the identity), the abbey wallet, be spendable?
19:40:39 <DataHoarder> not through monero wallet itself I guess, it already has issues, but generally, as it hits some edge cases all about due to the spend pub being the identity
19:41:20 <DataHoarder> if I don't misremember this would be non-sendable under carrot derivations due to the checks on payment proposals, but I didn't confirm there
19:43:46 <DataHoarder> maybe it works, I'll test sending some stuff to 9sCrDesy9LK11111111111111111111111111111111112N1GuTZeagfRbbKcALdcZev4QXGGuoLh2x36LhaxLSxCZ3Viua :)
19:45:29 <br-m> <jeffro256> The wallet could have a spend privkey of 0, that works since one-time extensios are added to make the privkey of the one-time address non-0. But the one-time address couldn't have a total privkey of 0 > <DataHoarder> as an example, would the wallet with spend priv being a scalar of zero (which has spend pub as the identity), the abbey wallet, be spendable?
19:45:50 <DataHoarder> Yeah, that's understood even on current rules
19:54:22 <DataHoarder> in carrot-rs I guess that passes is_torsion_free check ofc (identity point multiplied by order is the identity point) and similar one happens on monero C++ code
19:55:20 <DataHoarder> then I indeed see the torsion clearing and explicit exclusion of the identity happen on just the fcmp++ areas
20:12:54 <DataHoarder> empirical answer https://stressnet.p2pool.observer/tx/c56b191c58f194fe24e5933a929f316c5453365b57943b2922f271692d3d6825