kayabaNerve submits CCS proposal to 'develop, prove, review, and audit' Full-Chain Membership Proofs

kayabaNerve (Luke Parker)¹ has submitted a CCS proposal² looking to help develop, prove, review, and audit Full-Chain Membership Proofs³:

This CCS is to develop, prove, review, and audit Full-Chain Membership Proofs (a trustless solution based on Generalized Bulletproofs) into Monero under RingCT, replacing the existing CLSAG. [..] Development of the proofs and protocols will be done by myself, kayabaNerve [..] Integration into Monero will be handled externally to this CCS, with jberman stating their intent to submit their own CCS.

Proposed funding: 2920 XMR (920:Dev + 2000:Research).

ETA: TBD.

Milestones

• M1: Polish GBPs (kayabaNerve) (160 XMR)
• M2: Polish the Elliptic Curve Divisor Library (kayabaNerve) (80 XMR)
• M3: Provide a specification of the circuit (kayabaNerve) (80 XMR)
• M4: Implement the gadgets (kayabaNerve) (320 XMR)
• M5: Implement the circuit (kayabaNerve) (200 XMR)
• M6: Implement the Generalized Schnorr Protocol (kayabaNerve) (40 XMR)
• M7: Implement the Towering Curve Cycle (TBD)
• M8: Provide a soundness proof for the proof using Elliptic Curve Divisors (TBD)
• M9: Formally verify the gadgets (TBD)
• M10: Prove the composition to be unlinkable, unforgeable, and non-malleable (TBD)
• M11: Audit the Implementation of GBPs (TBD)
• M12: Audit the Elliptic Curve Divisors Library (TBD)
• M13: Audit the implementation of the gadgets (TBD)
• M14: Audit the implementation of the circuit (TBD)
• M15: Audit the implementation of the Towering Curve Cycle (TBD)
• M16: Audit the implementation of the Generalized Schnorr Protocol (TBD)

It is worth noting that kayabaNerve is the lead developer of the upcoming Serai DEX⁴ and a known Monero ecosystem contributor⁵.

To share your feedback, ask questions and support this proposal, consult !448².

This is an ongoing story and the report will be updated when new information is available.

Update 24/4/14: proposal split⁶ into a Research CCS⁷ and a Development CCS⁸ (both on same PR); Tower Cycle development milestone removed.

Update 24/4/21: Research CCS migrated to !449⁹.

Update 24/4/26: dev price updated; both proposals moved to funding stage (dev proposal fully funded)¹⁰.

Update 24/4/27: kayabaNerve prepared a post on FCMP(++)s to be published on getmonero.org¹¹.

Update 24/4/28: blog post published¹².

Update 24/5/18: MRL reached loose consensus for Cypher Stack review of FCMP-RCT composition (including F-S variant) for 198 XMR¹³.

Update 24/5/28: MAGIC Grants to facilitate Veridise audit that covers Milestone #8 (Provide a soundness proof for the proof using Elliptic Curve Divisors)¹⁴.

Update 24/6/28: final report for FCMP++ review posted by Cypher Stack¹⁵.

Update 24/7/16: kayabaNerve ‘endorsed’ Brandon Goodell’s quote for conducting a review of the GBP security proofs¹⁶.

Update 24/8/7: Veridise divisor report review available¹⁷.

Update 24/8/7: kayabaNerve posted a ‘summary of all tasks thus far’¹⁸.

Update 24/11/19: ‘Veridise has completed their second report on negative coefficients and an extended review of the use of logarithmic derivatives’ (sgp)¹⁹.

Update 24/12/1: milestones completed, pending review²⁰.

Update 24/12/4: Goodell completes GBP security review - ‘if BPs are up to industry standards, then so are GBPs’²¹.

Update 24/12/10: kayabaNerve to ‘step back’ [from Monero work] ‘primarily due to personal reasons’ according to recent update²².

Update 24/12/18: new PR for milestones/payouts clarification submitted by plowsof (at luigi’s request)²³.