UkoeHB submits Seraphis PoC CCS proposal

Monero contributor UkoeHB¹ has submitted a CCS proposal² that aims to develop a Seraphis C++ proof-of-concept³:

Hi all, after some encouragement I decided to request funding for my ongoing work on Seraphis. Specifically, funding for future work on the Seraphis C++ proof-of-concept that I have been developing since the second week of September.

My goal is for this code to be 95% production-ready.

UkoeHB shares several potential benefits and costs when comparing Seraphis/Lelantus-Spark with Triptych and RingCT:

• (+) membership proof delegation
• (+) multi-tier wallet permissions
• (-) more implementation effort
• (-) all old addresses would become unusable (private keys/seeds/wallets don’t need to be replaced)

He suggests that the last con might actually be an opportunity to improve Monero:

Replacing old addresses is an opportunity to deprecate ‘normal addresses’ in favor of ‘subaddresses’ only. A uniform address format would simplify UX and various implementation details.

If this gets funded, the following tasks will be prioritized:

• core multisig functionality in Seraphis composition proof
• mock-up of 4 different Seraphis variants
• mock-up of Lelantus-Spark (probably… it turns out coding complex cryptographic algorithms like
• advanced signature schemes is a lot of work)
• unit tests for all of the above
• comprehensive performance testing of all tx protocol mock-ups

Once performance tests are complete, I will take a break of 1-4 weeks to finish the Seraphis paper.

UkoeHB has previously contributed to Monero by co-authoring Zero to Monero (1st⁴ and 2nd⁵ edition) and submitting several MRL & Monero core issues and PR’s⁶.

Total funding: 92.6 XMR (50 USD + 0.2 XMR Rate).

ETA: TBD (6 weeks @ 40hr/wk = 240hrs).

A previous MO report⁷ discussing Seraphis/Lelantus-Spark vs Triptych might be relevant to this proposal.

There is a high probability that one of the above will be part of Monero in the future. Regardless of which one the community picks, there is little doubt that the amount of decoys will increase as the ring signatures decrease in size and become more efficient, thus ultimately making Monero better.

To share your feedback, ask questions and support this proposal, consult !256².

Update 21/11/1: the proposal was fully funded.

Update 22/2/23: proposal completed⁸.