2

I hear references to Bulletproofs++ in Monero, however I have not seen any clear explanation of how they improve upon "standard" Bulletproofs. Can someone provide a simple explanation of the differences especially with regards to transaction size?

1 Answer 1

2

I hear references to Bulletproofs++ in Monero,

It's actually Bulletproofs+ (note the single +) and has recently been merged to the master branch, so should be in the next major release.

however I have not seen any clear explanation of how they improve upon "standard" Bulletproofs.

See https://www.getmonero.org/2020/12/24/Bulletproofs+-in-Monero.html

Most notably:

The new construction would make transactions smaller, faster for wallets to generate, and faster for network participants to verify.

And for the detail:

https://eprint.iacr.org/2020/735

2
  • Am I reading this correctly that proofs are 576 bytes then? Commented Apr 8, 2022 at 9:29
  • For proving a single value, yes.
    – jtgrassie
    Commented Apr 8, 2022 at 12:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.