Hacker News Reader

Comment by josh2600 | Hacker News Reader

[flagged]

Do you mean you use known compromised/unreliable algorithms with a significant probability of allowing someone to steal someone's money?

The point of the OP was that Dalek library provides API to Ristretto (https://ristretto.group) which is a proper mathematical prime order group, unlike stock Ed25519 API that exposes cofactors and caused famous issues in Monero.

Yes this is my point.

This removes cofactor attacks which famously allowed multi-spend. Dalek removes or severely reduces this possibility.

Which curve do you use?

https://github.com/dalek-cryptography/curve25519-dalek

25519, ristretto group.

There's a weird sort of doublethink going on in your post. You're trying to attract talent that knows cryptography but seem to be using the same cryptobro snake oil you presumably use to sell your product (dude...imagine someone spending 8x the bitcoin!!!1! Even tho bitcoin uses secp256)

You also seem to be trying to give the impression you're doing something new and interesting rather than just deploying ristretto255 like everyone else. But you don't want to be caught rolling your own crypto, so you're being deliberately vague.

I think this is an unfair characterization. My point was to try to help individuals mentally model what could happen in the event of a cofactor attack. I think it would’ve been more confusing to say “imagine spending a txo 8x!” Because most people even in crypto don’t know what a transaction output is :/.

Please note that we didn’t roll or build Dalek, so again, this is a mischaracterization.

Also, yes, we are doing quite a bit that’s novel and interesting. For example, we implemented the first at-scale private information recovery system (entitled MobileCoin Fog) which makes extensive use of PATH and Circuit Oblivious RAM (and all of our stuff is open source). There’s quite a bit of new and creative stuff in our GitHub if you want to poke around.

Reply on news.ycombinator.com