Could anybody explain the logic behind multiexp method in the bulletproof Monero implementation.

Source code: https://github.com/monero-project/monero/blob/v0.17.1.9/src/ringct/bulletproofs.cc#L85-L94

1 Answer 1


The function is performing Multi-Exponentiation and is just a stub for using the most efficient algorithm (Straus or Pippenger, cached or uncached), based on the input data.

Some timings in this commit, which have informed selection criteria.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.