This is going to be the biggest improvement since the inception of the Cashu protocol. Incredible work, nostr:nprofile1qqsw8lr88lzln8x92ng073m4v72kglf9edhxvk8eztg3ftny98f46dgpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcpy3mhxue69uhhyetvv9ujummvv33kjare943xjarrda5kuetjwvhxjmnxduhsz9thwden5te0wfjkccte9ejxzmt4wvhxjme0y5wjd5, truly impressive.
Trying to implement a folded Inner Product Argument (IPA) for bulletproofs in cashu.
https://github.com/lollerfirst/cashu-kvac/blob/bulletproof/src/bulletproof.py#L24
Discussion
Can you explain what this means, for the interested layman?
Bulletproofs are used to prove that the coins are within a range. IPA is a building block. They are a fundamental for building blinded amount ecash. And with blinded amount ecash, you can have ANY amount ecash, which makes ultrasmall wallets possible.
Idk what this means but if you're excited, I'm excited to learn.
Bulletproofs are used to prove that the coins are within a range. IPA is a building block. They are a fundamental for building blinded amount ecash. And with blinded amount ecash, you can have ANY amount ecash, which makes ultrasmall wallets possible.
When you say any amount and ultra small wallets do you mean mSats?
I mean for example one single coin represents the entire wallet with 101 bytes
Proving coins are in a range rather than a specific amount is useful to obscure timing around inflows and outflows? This protects mint users’ privacy?
This is already doable with Chaumian ecash unlinkability properties. What we struggle to do is have the same unlikability also forr the amount the ecash is for.