Rangeproof in Mimblewimble?

[Amitabh S]

First of all, I must say its a very interesting idea. Somehow I couldn't find efficient NIZK range proofs and the mimblewimble paper kind of assumes it as "obvious".

Maybe I missed something but please point me to some efficient implementation of range proofs.

BTW the whitepaper is here
https://download.wpsoftware.net/bitcoin/wizardry/mimblewimble.txt

[gmaxwell]

First of all, I must say its a very interesting idea. Somehow I couldn't find efficient NIZK range proofs and the mimblewimble paper kind of assumes it as "obvious".

Maybe I missed something but please point me to some efficient implementation of range proofs.

BTW the whitepaper is here
https://download.wpsoftware.net/bitcoin/wizardry/mimblewimble.txt

https://bitcointalk.org/index.php?topic=1085273.0

[kushti]

Any security proofs behind both CT/MW schemes? both are looking pretty controversial in current form

[gmaxwell]

looking pretty controversial in current form

You are calling a binary decomposition range proof controversial? Really?

[kushti]

looking pretty controversial in current form

You are calling a binary decomposition range proof controversial? Really?

What are you talking about? Don't see any security proofs there: https://people.xiph.org/~greg/confidential_values.txt. Please provide a link.