--- Day changed Sat Nov 18 2017
02:04 -!- roconnor_ [~roconnor@host-45-58-213-120.dyn.295.ca] has quit [Ping timeout: 250 seconds]     
03:15 -!- SopaXorzTaker [~SopaXorzT@unaffiliated/sopaxorztaker] has quit [Quit: Leaving]     
03:18 < gmaxwell> man, this graph continues to bother me, https://user-images.githubusercontent.com/2582071/32731185-12c0f108-c881-11e7-83c7-c2432b5fadf5.png
03:19 < gmaxwell> strauss slope at the beginning looks like pippenger at the end, it feels like there should exist a better hybrid algorithim that continues the slope the whole way through.
03:24 -!- jtimon [~quassel@164.31.134.37.dynamic.jazztel.es] has joined #secp256k1     
03:24 < gmaxwell> if only we could find an efficient addition ladder for sparser WNAF buckets to allow combining precomputation with pipenger.
04:46 -!- SopaXorzTaker [~SopaXorzT@unaffiliated/sopaxorztaker] has joined #secp256k1     
04:55 -!- SopaXorzTaker [~SopaXorzT@unaffiliated/sopaxorztaker] has quit [Read error: Connection reset by peer]     
04:56 -!- SopaXorzTaker [~SopaXorzT@unaffiliated/sopaxorztaker] has joined #secp256k1     
05:20 -!- roconnor_ [~roconnor@host-45-78-196-251.dyn.295.ca] has joined #secp256k1     
05:22 < andytoshi> yeah. one of the pippinger papers hinted at something like this IIRC. that everything, including strauss, is somehow a special case of pippenger. but us making the distinction (aside from being conceptually easier) lets us do the wnaf ladder for strauss
05:26 -!- roconnor_ [~roconnor@host-45-78-196-251.dyn.295.ca] has quit [Quit: Konversation terminated!]     
05:38 < andytoshi> i can't tell if there's some way in which the rangeproof is a special case of the arithmetic circuit proof, but the latter is definitely more complicated and has a bigger constant. and it's not clear how to map my trick into it, though it may be possible
06:10 < andytoshi> aw, dammit, this doesn't work, it turns out i was using a challenge before it was defined
07:01 -!- arubi [~ese168@gateway/tor-sasl/ese168] has quit [Remote host closed the connection]     
07:02 -!- arubi [~ese168@gateway/tor-sasl/ese168] has joined #secp256k1     
10:51 < gmaxwell> andytoshi: we tried a bit to extend the WNAF pippinger to take precomputed points, but so far didn't come up with a precomputation scheme that + optimized addition ladder that complement each other... though we've only tried a few things.
12:01 -!- SopaXorzTaker [~SopaXorzT@unaffiliated/sopaxorztaker] has quit [Remote host closed the connection]     
13:14 -!- nickler [~nickler@185.12.46.130] has quit [Quit: leaving]     
13:16 -!- nickler [~nickler@185.12.46.130] has joined #secp256k1     
13:52 -!- jtimon [~quassel@164.31.134.37.dynamic.jazztel.es] has quit [Ping timeout: 240 seconds]     
13:58 -!- jtimon [~quassel@164.31.134.37.dynamic.jazztel.es] has joined #secp256k1     
15:40 < andytoshi> oh, i think i was way overthinking this.. the extra multiexps in the rangeproof have the same basis as the multiexps in the inner product .. so i can just add the scalars from the rangeproof to the ones from the inner product
15:40 < andytoshi> unless i'm being dumb again, but this time i think i'm not :P
15:41 < andytoshi> and this trick generalizes to the arithmetic circuit
15:49 < gmaxwell> hurrah.
16:20 -!- maaku [~mark@173.234.25.100] has quit [Quit: Lost terminal]     
19:23 -!- jtimon [~quassel@164.31.134.37.dynamic.jazztel.es] has quit [Ping timeout: 240 seconds]     
20:06 -!- lukedashjr [~luke-jr@unaffiliated/luke-jr] has joined #secp256k1     
20:06 -!- luke-jr [~luke-jr@unaffiliated/luke-jr] has quit [Ping timeout: 240 seconds]     
20:10 -!- lukedashjr is now known as luke-jr     
20:47 -!- maaku [~maaku@173.234.25.100] has joined #secp256k1     
20:47 -!- maaku [~maaku@173.234.25.100] has quit [Client Quit]     
20:48 -!- maaku [~maaku@173.234.25.100] has joined #secp256k1     
22:18 -!- oleganza [~oleganza@c-73-170-224-149.hsd1.ca.comcast.net] has joined #secp256k1