Flesh out the ZKP section about xmr-btc-atomic-swap HOT 3 CLOSED

I've updated the protocol but zero-knowledge proofs are the same. I started looking more in depth into Bulletproofs zkp, as zkSNARK they can prove arbitrary arithmetic circuits and so pre-image + range proofs. And that what is needed.

I'm interested especially in the Rust implementation by dalek-cryptography (https://github.com/dalek-cryptography/bulletproofs).

from xmr-btc-atomic-swap.

I need to do more research to figure out how to create the proof zkp[it exists s: h = HASH(s) and a = XMRAddress(s)]. My first thought is to use zkSNARK, but I need to find a way to express the NP statement.

from xmr-btc-atomic-swap.

As a recent research funding I had the possibility to work again on the protocol and after reading and discussing with the Monero Research Lab I discovered new techniques to achieve the same result without generic zero-knowledge proof circuits, the result is now merged on master if you want to have a look!

More will be published soon about the research results

from xmr-btc-atomic-swap.