René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Using Hacky AOS Ring, extend to be usable as a linkable ring signature","articleBody":"The linkable ring signature requires two additional point multiplications and a point addition per round.\r\n\r\n```python\r\na = add(sbmul(t), multiply(y, c))\r\nb = add(multiply(M, t), multiply(tag, c))\r\n```\r\n\r\nThe problem is that the hacky multiply function returns an Ethereum address rather than a point.\r\n\r\nPoint addition can be performed by providing a witness of those points and verifying they hash to the same result.\r\n\r\ne.g. \r\n\r\n```python\r\na = add(sbmul(t), multiply(y, c))\r\nx = hackymul(Tag, c)\r\ny = hackymul(M, t)\r\nassert point_to_addr(W[i]) == x\r\nassert point_to_addr(W[i+]) == y\r\nb = add(x, y)\r\n```\r\n\r\nThis means the total number of parameters required for a ring signature of N participants is:\r\n\r\n * 4*N + 1\r\n\r\nWhere `2*N` for the witnesses, `N` for the public keys, `N` for the `t` values and one initial seed value.\r\n\r\nSo, a ring of 10 keys requires 31 inputs of 32 bytes each, in addition to the public keys.","author":{"url":"https://github.com/HarryR","@type":"Person","name":"HarryR"},"datePublished":"2018-08-24T07:53:12.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/4/solcrypto/issues/4"}