BulletProofs Moneropedia article

+ Rewritten after other reading around original RingCT paper & 2017 update from Borromean to Schnorr
+ corrections after reviews

_i18n/ar.yml

@@ -568,6 +568,7 @@ moneropedia:
     blockchain: Blockchain
     block: Block
     bootstrap-node: Bootstrap-node
+    bulletproofs: Bulletproofs
     canonically-unique-host: Canonically-unique host
     change: Change
     clearnet: Clearnet

_i18n/ar/resources/moneropedia/bulletproofs.md

+---
+terms: ["bulletproofs", "bulletproof"]
+summary: "a new kind of range proofs replacing RingCT in transactions to obfuscate the amounts sent"
+---
+
+{% include untranslated.html %}
+### The Basics
+@RingCT was introduced to obfuscate transaction amounts. One goal of @RingCT was to prove the sum of inputs - outputs in the @transaction was equal to 0, and all outputs were positive numbers.  
+To accomplish this, two kind of ring signatures were constructed: One ring signature for the whole transaction (to prove the sum is 0), and a set of ring signatures for the subsets of transaction bits (to prove the outputs are positive numbers), then combined together using originally Schnorr signatures (and later replaced by Borromean ring signature).  
+While it was doing the job, a big drawback was the huge size of such a ringCT transaction.
+
+### Where it comes to bulletproofs
+Back in 2017, a [Standford applied crypto group](https://crypto.stanford.edu/bulletproofs/) wrote a [paper](https://eprint.iacr.org/2017/1066.pdf) presenting a new kind of range proofs, called bulletproofs.  
+
+> Bulletproofs are short non-interactive zero-knowledge proofs that require no trusted setup.
+
+Bulletproofs, unlike Borromean or Schnorr signatures, are very efficient as range proofs. Proving a big set of data only generates a small proof, and the size of this proofs grows logarithmically with the size of the data being proved.  
+It means that increasing the number of outputs in a transaction will, with bulletproofs only slightly increase the size of the proof.  
+Bulletproofs also have the advantage to allow to prove that multiple committed amounts are in the desired range at once. No need to prove each output to each destination in separate proofs; the whole transaction amounts could be proven in one bigger (but still very small) bulletproof.
+
+### Thorough audit process and implementation
+As bulletproofs were really new, and the initial implementation made by the group, while thoroughly done, needed a rewrite focused on our specific use-case, implementing bulletproof in Monero was not a simple thing.  
+The code has been written and rewritten to follow the new version of bulletproofs which was still being developed, but once this Monero implementation was finalized, the resulting deployment should be taken with extreme care.  
+Therefore, the community started an auditing process. Researchers reached out to Benedikt Bünz, lead author of the Bulletproofs paper, and to [OSTIF](https://ostif.org/) an organization which helps open source technologies to improve and secure themselves.  
+OSTIF directed the group to several organizations with the skills required to perform the audit. While one of them asked to be kept unnamed and was therefore put away from the process that needed to be public, two others (QuarksLab & Kudelski Security) were choosen to conduct the audit.  
+Our 3 auditors were funded by the community to check out the if the implementation did not did not contain critical bugs, and if it did not have any exploits.  
+The final reports were released during the summer of 2018, with several useful corrections and fixes suggested, and the final bulletproof implementation has been added first to Monero Stagenet, and then to the main Monero network during the October 2018 network upgrade.
+
+Since the bulletproofs deployment, the size of an average transaction has dropped by at least 80%, as well as the transaction fees.
+
+More explanations on Monero's implementation of bulletproofs could be found on youtube fondajo channel in a [conversation with Sarang Noether](https://www.youtube.com/watch?v=6lEWqIMLzUU).

_i18n/en.yml

@@ -568,6 +568,7 @@ moneropedia:
     blockchain: Blockchain
     block: Block
     bootstrap-node: Bootstrap-node
+    bulletproofs: Bulletproofs
     canonically-unique-host: Canonically-unique host
     change: Change
     clearnet: Clearnet

_i18n/en/resources/moneropedia/bulletproofs.md

+---
+terms: ["bulletproofs", "bulletproof"]
+summary: "a new kind of range proofs replacing RingCT in transactions to obfuscate the amounts sent"
+---
+
+### The Basics
+@RingCT was introduced to obfuscate transaction amounts. One goal of @RingCT was to prove the sum of inputs - outputs in the @transaction was equal to 0, and all outputs were positive numbers.  
+To accomplish this, two kind of ring signatures were constructed: One ring signature for the whole transaction (to prove the sum is 0), and a set of ring signatures for the subsets of transaction bits (to prove the outputs are positive numbers), then combined together using originally Schnorr signatures (and later replaced by Borromean ring signature).  
+While it was doing the job, a big drawback was the huge size of such a ringCT transaction.
+
+### Where it comes to bulletproofs
+Back in 2017, a [Standford applied crypto group](https://crypto.stanford.edu/bulletproofs/) wrote a [paper](https://eprint.iacr.org/2017/1066.pdf) presenting a new kind of range proofs, called bulletproofs.  
+
+> Bulletproofs are short non-interactive zero-knowledge proofs that require no trusted setup.
+
+Bulletproofs, unlike Borromean or Schnorr signatures, are very efficient as range proofs. Proving a big set of data only generates a small proof, and the size of this proofs grows logarithmically with the size of the data being proved.  
+It means that increasing the number of outputs in a transaction will, with bulletproofs only slightly increase the size of the proof.  
+Bulletproofs also have the advantage to allow to prove that multiple committed amounts are in the desired range at once. No need to prove each output to each destination in separate proofs; the whole transaction amounts could be proven in one bigger (but still very small) bulletproof.
+
+### Thorough audit process and implementation
+As bulletproofs were really new, and the initial implementation made by the group, while thoroughly done, needed a rewrite focused on our specific use-case, implementing bulletproof in Monero was not a simple thing.  
+The code has been written and rewritten to follow the new version of bulletproofs which was still being developed, but once this Monero implementation was finalized, the resulting deployment should be taken with extreme care.  
+Therefore, the community started an auditing process. Researchers reached out to Benedikt Bünz, lead author of the Bulletproofs paper, and to [OSTIF](https://ostif.org/) an organization which helps open source technologies to improve and secure themselves.  
+OSTIF directed the group to several organizations with the skills required to perform the audit. While one of them asked to be kept unnamed and was therefore put away from the process that needed to be public, two others (QuarksLab & Kudelski Security) were choosen to conduct the audit.  
+Our 3 auditors were funded by the community to check out the if the implementation did not did not contain critical bugs, and if it did not have any exploits.  
+The final reports were released during the summer of 2018, with several useful corrections and fixes suggested, and the final bulletproof implementation has been added first to Monero Stagenet, and then to the main Monero network during the October 2018 network upgrade.
+
+Since the bulletproofs deployment, the size of an average transaction has dropped by at least 80%, as well as the transaction fees.
+
+More explanations on Monero's implementation of bulletproofs could be found on youtube fondajo channel in a [conversation with Sarang Noether](https://www.youtube.com/watch?v=6lEWqIMLzUU).

_i18n/es.yml

@@ -567,6 +567,7 @@ moneropedia:
     blockchain: Blockchain
     block: Bloque
     bootstrap-node: Nodo Bootstrap
+    bulletproofs: Bulletproofs
     canonically-unique-host: Host único canónico
     change: Cambio
     clearnet: Clearnet

_i18n/es/resources/moneropedia/bulletproofs.md

+---
+terms: ["bulletproofs", "bulletproof"]
+summary: "a new kind of range proofs replacing RingCT in transactions to obfuscate the amounts sent"
+---
+
+{% include untranslated.html %}
+### The Basics
+@RingCT was introduced to obfuscate transaction amounts. One goal of @RingCT was to prove the sum of inputs - outputs in the @transaction was equal to 0, and all outputs were positive numbers.  
+To accomplish this, two kind of ring signatures were constructed: One ring signature for the whole transaction (to prove the sum is 0), and a set of ring signatures for the subsets of transaction bits (to prove the outputs are positive numbers), then combined together using originally Schnorr signatures (and later replaced by Borromean ring signature).  
+While it was doing the job, a big drawback was the huge size of such a ringCT transaction.
+
+### Where it comes to bulletproofs
+Back in 2017, a [Standford applied crypto group](https://crypto.stanford.edu/bulletproofs/) wrote a [paper](https://eprint.iacr.org/2017/1066.pdf) presenting a new kind of range proofs, called bulletproofs.  
+
+> Bulletproofs are short non-interactive zero-knowledge proofs that require no trusted setup.
+
+Bulletproofs, unlike Borromean or Schnorr signatures, are very efficient as range proofs. Proving a big set of data only generates a small proof, and the size of this proofs grows logarithmically with the size of the data being proved.  
+It means that increasing the number of outputs in a transaction will, with bulletproofs only slightly increase the size of the proof.  
+Bulletproofs also have the advantage to allow to prove that multiple committed amounts are in the desired range at once. No need to prove each output to each destination in separate proofs; the whole transaction amounts could be proven in one bigger (but still very small) bulletproof.
+
+### Thorough audit process and implementation
+As bulletproofs were really new, and the initial implementation made by the group, while thoroughly done, needed a rewrite focused on our specific use-case, implementing bulletproof in Monero was not a simple thing.  
+The code has been written and rewritten to follow the new version of bulletproofs which was still being developed, but once this Monero implementation was finalized, the resulting deployment should be taken with extreme care.  
+Therefore, the community started an auditing process. Researchers reached out to Benedikt Bünz, lead author of the Bulletproofs paper, and to [OSTIF](https://ostif.org/) an organization which helps open source technologies to improve and secure themselves.  
+OSTIF directed the group to several organizations with the skills required to perform the audit. While one of them asked to be kept unnamed and was therefore put away from the process that needed to be public, two others (QuarksLab & Kudelski Security) were choosen to conduct the audit.  
+Our 3 auditors were funded by the community to check out the if the implementation did not did not contain critical bugs, and if it did not have any exploits.  
+The final reports were released during the summer of 2018, with several useful corrections and fixes suggested, and the final bulletproof implementation has been added first to Monero Stagenet, and then to the main Monero network during the October 2018 network upgrade.
+
+Since the bulletproofs deployment, the size of an average transaction has dropped by at least 80%, as well as the transaction fees.
+
+More explanations on Monero's implementation of bulletproofs could be found on youtube fondajo channel in a [conversation with Sarang Noether](https://www.youtube.com/watch?v=6lEWqIMLzUU).

_i18n/fr.yml

@@ -569,6 +569,7 @@ moneropedia:
     blockchain: Chaîne de blocs
     block: Bloc
     bootstrap-node: Nœud d'amorce
+    bulletproofs: Bulletproofs
     canonically-unique-host: Canonically-unique host
     change: Monnaie
     clearnet: Réseau en clair

_i18n/fr/resources/moneropedia/bulletproofs.md

+---
+terms: ["bulletproofs", "bulletproof"]
+summary: "Une nouvelle sorte de preuve d'étendue remplaçant les transactions confidentielles de cercle pour masquer les montant envoyés."
+---
+
+### Les Bases
+Les @transactions-confidentielles-de-cercle ont été mise en place pour masquer le montant des transactions. L'un des objectifs de @ringCT était de prouver que la sommes des entrées - sorties dans la @transaction était égale à 0, et que toutes les sorties étaient des nombre positifs.  
+Pour ce faire, deux types de signatures de cercle étaient construits : une signature cercle pour la totalité de la transaction (prouvant que la somme est 0) et un lot de signatures de cercle pour chaque bit de la transaction (prouvant que les sorties sont des nombres positifs), alors agrégés en utilisant d'abord les signatures de Schnorr (remplacées ensuite par les signatures de cercle Borroméennes).  
+Bien que cela fonctionnait, un gros désavantage était l'énorme taille de ces transactions RingCT.
+
+### En venir aux bulletproofs
+En 2017, un [groupe de cryptographie appliquée de Standford](https://crypto.stanford.edu/bulletproofs/) a écrit une [publication](https://eprint.iacr.org/2017/1066.pdf) présentant une nouvelle sorte de preuve d'étendue, appelé bulletproofs.  
+
+> Bulletproofs are short non-interactive zero-knowledge proofs that require no trusted setup.
+
+Bulletproofs, contrairement aux signatures Borroméennes ou aux signatures de Schnorr est très efficace en tant que preuve d'étendue. Prouver une grande quantité de donné ne génère qu'une petite preuve, et la taille de cette preuve grandit logarithmiquement avec la taille des données à prouver.  
+Cela signifie qu'augmenter le nombre de sorties dans une transaction n'augmentera, avec bulletproofs, qu'un tout petit peu la taille de la preuve.  
+Bulletproofs a aussi l'avantage de permettre de prouver que différents montants engagés se situent dans la plage souhaitée en une seule fois. Pas besoin de prouver chaque sortie vers chaque destination dans des preuves séparées. La totalité des montant de la transaction peuvent être prouvés avec une plus grosse (mais toujours très petite) bulletproofs.
+
+### Processus d'audit consciencieux et implémentation
+Comme les bulletproofs étaient totalement nouvelles, et l'implémentation initiale faite par le groupe, bien que parfaitement réalisée, nécessitait une réécriture orientée vers notre cas d'usage spécifique, l'implémentation de Bulletproof dans Monero n'était pas une mince affaire.  
+Le code a été écrit et réécrit pour suivre les nouvelles versions de Bulletproofs qui était toujours en cours de développement, mais une fois cette implémentation Monero finalisée, le déploiement qui en résulterait devrait être effectué avec le plus grand soin.  
+Dans ce sens, la communauté a démarrée un processus d'audit. Les chercheurs se sont rapprochés de Benedikt Bünz, l'auteur principal de la publication des Bulletproofs, et de l'[OSTIF](https://ostif.org/), une organisation qui aide les technologies open-source à s'amméliorer et à se sécuriser.  
+OSTIF nous a dirigé vers 3 sociétés en mesure de réaliser l'audit. Alors que l'une d'entre elles demandait à rester anonyme, ce qui l'évinçait de notre processus devant rester publique, les deux autres (QuarksLab & Kudelski Security) furent choisis pour réaliser l'audit.  
+Nos 3 auditeurs ont été financés par la communauté pour vérifier que l'implémentation était exempte de bug critique ou d'axe d'exploitation.  
+Les rapports finaux ont été publiés durant l'été 2018, avec quelques rectifications et corrections utiles conseillées, et l'implémentation définitive de bulletproof a été ajoutée au Stagenet de Monero, puis au Mainnet lors de la mise à jours réseau du 18 Octobre 2018.
+
+Depuis que Bulletproofs est en application sur le réseau Monero, la taille moyenne des transaction a été réduite d'au moins 80%, de même que les frais de transaction.
+
+Plus d'information (en Anglais) sur l'implémentation Monero de bulletproofs sur la chaîne Youtube de Fondajo lors d'une [conversation avec Sarang Noether](https://www.youtube.com/watch?v=6lEWqIMLzUU).

_i18n/it.yml

@@ -567,6 +567,7 @@ moneropedia:
     blockchain: Blockchain
     block: Block
     bootstrap-node: Bootstrap-node
+    bulletproofs: Bulletproofs
     canonically-unique-host: Canonically-unique host
     change: Change
     clearnet: Clearnet

_i18n/it/resources/moneropedia/bulletproofs.md

+---
+terms: ["bulletproofs", "bulletproof"]
+summary: "a new kind of range proofs replacing RingCT in transactions to obfuscate the amounts sent"
+---
+
+{% include untranslated.html %}
+### The Basics
+@RingCT was introduced to obfuscate transaction amounts. One goal of @RingCT was to prove the sum of inputs - outputs in the @transaction was equal to 0, and all outputs were positive numbers.  
+To accomplish this, two kind of ring signatures were constructed: One ring signature for the whole transaction (to prove the sum is 0), and a set of ring signatures for the subsets of transaction bits (to prove the outputs are positive numbers), then combined together using originally Schnorr signatures (and later replaced by Borromean ring signature).  
+While it was doing the job, a big drawback was the huge size of such a ringCT transaction.
+
+### Where it comes to bulletproofs
+Back in 2017, a [Standford applied crypto group](https://crypto.stanford.edu/bulletproofs/) wrote a [paper](https://eprint.iacr.org/2017/1066.pdf) presenting a new kind of range proofs, called bulletproofs.  
+
+> Bulletproofs are short non-interactive zero-knowledge proofs that require no trusted setup.
+
+Bulletproofs, unlike Borromean or Schnorr signatures, are very efficient as range proofs. Proving a big set of data only generates a small proof, and the size of this proofs grows logarithmically with the size of the data being proved.  
+It means that increasing the number of outputs in a transaction will, with bulletproofs only slightly increase the size of the proof.  
+Bulletproofs also have the advantage to allow to prove that multiple committed amounts are in the desired range at once. No need to prove each output to each destination in separate proofs; the whole transaction amounts could be proven in one bigger (but still very small) bulletproof.
+
+### Thorough audit process and implementation
+As bulletproofs were really new, and the initial implementation made by the group, while thoroughly done, needed a rewrite focused on our specific use-case, implementing bulletproof in Monero was not a simple thing.  
+The code has been written and rewritten to follow the new version of bulletproofs which was still being developed, but once this Monero implementation was finalized, the resulting deployment should be taken with extreme care.  
+Therefore, the community started an auditing process. Researchers reached out to Benedikt Bünz, lead author of the Bulletproofs paper, and to [OSTIF](https://ostif.org/) an organization which helps open source technologies to improve and secure themselves.  
+OSTIF directed the group to several organizations with the skills required to perform the audit. While one of them asked to be kept unnamed and was therefore put away from the process that needed to be public, two others (QuarksLab & Kudelski Security) were choosen to conduct the audit.  
+Our 3 auditors were funded by the community to check out the if the implementation did not did not contain critical bugs, and if it did not have any exploits.  
+The final reports were released during the summer of 2018, with several useful corrections and fixes suggested, and the final bulletproof implementation has been added first to Monero Stagenet, and then to the main Monero network during the October 2018 network upgrade.
+
+Since the bulletproofs deployment, the size of an average transaction has dropped by at least 80%, as well as the transaction fees.
+
+More explanations on Monero's implementation of bulletproofs could be found on youtube fondajo channel in a [conversation with Sarang Noether](https://www.youtube.com/watch?v=6lEWqIMLzUU).

_i18n/pl.yml

@@ -568,6 +568,7 @@ moneropedia:
     blockchain: Łańcuch bloków
     block: Blok
     bootstrap-node: Bootstrap-node
+    bulletproofs: Bulletproofs
     canonically-unique-host: Zasadniczy unikalny host
     change: Reszta
     clearnet: Clearnet

_i18n/pl/resources/moneropedia/bulletproofs.md

+---
+terms: ["bulletproofs", "bulletproof"]
+summary: "a new kind of range proofs replacing RingCT in transactions to obfuscate the amounts sent"
+---
+
+{% include untranslated.html %}
+### The Basics
+@RingCT was introduced to obfuscate transaction amounts. One goal of @RingCT was to prove the sum of inputs - outputs in the @transaction was equal to 0, and all outputs were positive numbers.  
+To accomplish this, two kind of ring signatures were constructed: One ring signature for the whole transaction (to prove the sum is 0), and a set of ring signatures for the subsets of transaction bits (to prove the outputs are positive numbers), then combined together using originally Schnorr signatures (and later replaced by Borromean ring signature).  
+While it was doing the job, a big drawback was the huge size of such a ringCT transaction.
+
+### Where it comes to bulletproofs
+Back in 2017, a [Standford applied crypto group](https://crypto.stanford.edu/bulletproofs/) wrote a [paper](https://eprint.iacr.org/2017/1066.pdf) presenting a new kind of range proofs, called bulletproofs.  
+
+> Bulletproofs are short non-interactive zero-knowledge proofs that require no trusted setup.
+
+Bulletproofs, unlike Borromean or Schnorr signatures, are very efficient as range proofs. Proving a big set of data only generates a small proof, and the size of this proofs grows logarithmically with the size of the data being proved.  
+It means that increasing the number of outputs in a transaction will, with bulletproofs only slightly increase the size of the proof.  
+Bulletproofs also have the advantage to allow to prove that multiple committed amounts are in the desired range at once. No need to prove each output to each destination in separate proofs; the whole transaction amounts could be proven in one bigger (but still very small) bulletproof.
+
+### Thorough audit process and implementation
+As bulletproofs were really new, and the initial implementation made by the group, while thoroughly done, needed a rewrite focused on our specific use-case, implementing bulletproof in Monero was not a simple thing.  
+The code has been written and rewritten to follow the new version of bulletproofs which was still being developed, but once this Monero implementation was finalized, the resulting deployment should be taken with extreme care.  
+Therefore, the community started an auditing process. Researchers reached out to Benedikt Bünz, lead author of the Bulletproofs paper, and to [OSTIF](https://ostif.org/) an organization which helps open source technologies to improve and secure themselves.  
+OSTIF directed the group to several organizations with the skills required to perform the audit. While one of them asked to be kept unnamed and was therefore put away from the process that needed to be public, two others (QuarksLab & Kudelski Security) were choosen to conduct the audit.  
+Our 3 auditors were funded by the community to check out the if the implementation did not did not contain critical bugs, and if it did not have any exploits.  
+The final reports were released during the summer of 2018, with several useful corrections and fixes suggested, and the final bulletproof implementation has been added first to Monero Stagenet, and then to the main Monero network during the October 2018 network upgrade.
+
+Since the bulletproofs deployment, the size of an average transaction has dropped by at least 80%, as well as the transaction fees.
+
+More explanations on Monero's implementation of bulletproofs could be found on youtube fondajo channel in a [conversation with Sarang Noether](https://www.youtube.com/watch?v=6lEWqIMLzUU).

_i18n/ru.yml

@@ -552,6 +552,7 @@ moneropedia:
     blockchain: Блокчейн
     block: Блок
     bootstrap-node: Узел начальной загрузки
+    bulletproofs: Bulletproofs
     canonically-unique-host: Канонически уникальный хост
     change: Сдача
     clearnet: Клирнет

_i18n/ru/resources/moneropedia/bulletproofs.md

+---
+terms: ["bulletproofs", "bulletproof"]
+summary: "a new kind of range proofs replacing RingCT in transactions to obfuscate the amounts sent"
+---
+
+{% include untranslated.html %}
+### The Basics
+@RingCT was introduced to obfuscate transaction amounts. One goal of @RingCT was to prove the sum of inputs - outputs in the @transaction was equal to 0, and all outputs were positive numbers.  
+To accomplish this, two kind of ring signatures were constructed: One ring signature for the whole transaction (to prove the sum is 0), and a set of ring signatures for the subsets of transaction bits (to prove the outputs are positive numbers), then combined together using originally Schnorr signatures (and later replaced by Borromean ring signature).  
+While it was doing the job, a big drawback was the huge size of such a ringCT transaction.
+
+### Where it comes to bulletproofs
+Back in 2017, a [Standford applied crypto group](https://crypto.stanford.edu/bulletproofs/) wrote a [paper](https://eprint.iacr.org/2017/1066.pdf) presenting a new kind of range proofs, called bulletproofs.  
+
+> Bulletproofs are short non-interactive zero-knowledge proofs that require no trusted setup.
+
+Bulletproofs, unlike Borromean or Schnorr signatures, are very efficient as range proofs. Proving a big set of data only generates a small proof, and the size of this proofs grows logarithmically with the size of the data being proved.  
+It means that increasing the number of outputs in a transaction will, with bulletproofs only slightly increase the size of the proof.  
+Bulletproofs also have the advantage to allow to prove that multiple committed amounts are in the desired range at once. No need to prove each output to each destination in separate proofs; the whole transaction amounts could be proven in one bigger (but still very small) bulletproof.
+
+### Thorough audit process and implementation
+As bulletproofs were really new, and the initial implementation made by the group, while thoroughly done, needed a rewrite focused on our specific use-case, implementing bulletproof in Monero was not a simple thing.  
+The code has been written and rewritten to follow the new version of bulletproofs which was still being developed, but once this Monero implementation was finalized, the resulting deployment should be taken with extreme care.  
+Therefore, the community started an auditing process. Researchers reached out to Benedikt Bünz, lead author of the Bulletproofs paper, and to [OSTIF](https://ostif.org/) an organization which helps open source technologies to improve and secure themselves.  
+OSTIF directed the group to several organizations with the skills required to perform the audit. While one of them asked to be kept unnamed and was therefore put away from the process that needed to be public, two others (QuarksLab & Kudelski Security) were choosen to conduct the audit.  
+Our 3 auditors were funded by the community to check out the if the implementation did not did not contain critical bugs, and if it did not have any exploits.  
+The final reports were released during the summer of 2018, with several useful corrections and fixes suggested, and the final bulletproof implementation has been added first to Monero Stagenet, and then to the main Monero network during the October 2018 network upgrade.
+
+Since the bulletproofs deployment, the size of an average transaction has dropped by at least 80%, as well as the transaction fees.
+
+More explanations on Monero's implementation of bulletproofs could be found on youtube fondajo channel in a [conversation with Sarang Noether](https://www.youtube.com/watch?v=6lEWqIMLzUU).

resources/moneropedia/bulletproofs.md

+---
+layout: moneropedia
+title: titles.moneropedia
+entry: moneropedia.entries.bulletproofs
+---
+
+@moneropedia_article
+
+{% t global.lang_tag %}
+{% tf resources/moneropedia/bulletproofs.md %}