O-O
Castling is smart. +1 vote
Can someone give me some cliff notes for this?
https://github.com/ShenNoether/MiniNero/blob/master/RingCT0.1_copy.pdfI assume it is too late for 0.9 but could it be in the next release? Is this as important as it sounds? What are the negatives? Anything we should be worried about from sections 4, 5 or six of the paper (tag linkability, exculpability and unforgeability) still needs to be completed)
1. Definitely not going to be in 0.9. The math isn't even done yet (as you pointed out).
2. The idea is to still have ring signatures, and allow the amounts to be hidden but cryptographically commit to sum(out)=sum(in).