Re: [Bitcoin-development] bip44 GPG identities - POC demo

2015-03-08 Thread Natanael
Den 8 mar 2015 02:36 skrev Pavol Rusnak st...@gk2.sk:

 On 07/03/15 16:53, Mem Wallet wrote:
[...]
 I am currently in process of implementing a SignIdentity message for
 TREZOR, which will be used for HTTPS/SSH/etc. logins.

 See PoC here:

https://github.com/trezor/trezor-emu/commit/9f612c286cc7b8268ebaec4a36757e1c19548717

 The idea is to derive the BIP32 path from HTTPS/SSH URI (by hashing it
 and use m/46'/a'/b'/c'/d' where a,b,c,d are first 4*32 bits of the hash)
 and use that to derive the private key. This scheme might work for GPG
 keys (just use gpg://u...@host.com for the URI) as well.

Reminds me of FIDO's U2F protocol.

http://fidoalliance.org/specifications
https://www.yubico.com/products/yubikey-hardware/fido-u2f-security-key/

It ties into the browser SSL session to make sure only the correct server
can get the correct response for the challenge-response protocol, so that
credentials phishing is blocked and worthless. A unique keypair is
generated for each service for privacy, so that you can't easily be
identified across services from the usage of the device alone (thus safe
for people with multiple pseudonyms).
--
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/___
Bitcoin-development mailing list
Bitcoin-development@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bitcoin-development


Re: [Bitcoin-development] New paper: Research Perspectives and Challenges for Bitcoin and Cryptocurrencies

2015-03-08 Thread Pindar Wong
*Spendid* work Andrew (and all the other authors). Well done.

This is a timely paper that deserves significantly wider circulation and
comment.

FWIW, Joichi Ito, from the MIT media Lab, made reference to your work
during yesterday's MIT Bitcoin Expo
https://www.youtube.com/watch?v=lIgjogLipvk[@ 2:46:54]

p.


On Wed, Mar 4, 2015 at 11:28 PM, Mike Hearn m...@plan99.net wrote:

 Nice, Andrew.

 Just one minor point. SPV clients do not need to maintain an ever growing
 list of PoW solutions. BitcoinJ uses a ring buffer with 5000 headers and
 thus has O(1) disk usage. Re-orgs past the event horizon cannot be
 processed but are assumed to be sufficiently rare that manual intervention
 would be acceptable.

 On Mon, Mar 2, 2015 at 8:48 AM, Andrew Miller amil...@cs.umd.edu wrote:

 We (Joseph Bonneau, myself Arvind Narayanan, Jeremy Clark, Ed Felten,
 Josh Kroll -- from Stanford, Maryland, Concordia, Princeton) have
 written a “systemization” paper about Bitcoin-related research. It’s
 going to appear in the Oakland security conference later this year
 (IEEE Security and Privacy) but we wanted to announce a draft to this
 community ahead of time.

 http://www.jbonneau.com/doc/BMCNKF15-IEEESP-bitcoin.pdf

 One of the main goals of our work is to build a bridge between the
 computer science research community and the cryptocurrency community.
 Many of the most interesting ideas and proposals for Bitcoin come from
 this mailing list and forums/wikis/irc channels, where many academic
 researchers simply don’t know to look! In fact, we started out by
 scraping all the interesting posts/articles we could find and trying
 to figure out how we could organize them. We hope our paper helps some
 of the best ideas and research questions from the Bitcoin community
 bubble up and inspires researchers to build on them.

 We didn’t limit our scope to Bitcoin, but we also decided not to
 provide a complete survey of altcoins and other next-generation
 cryptocurrency designs. Instead, we tried to explain all the
 dimensions along which these designs differ from Bitcoin.

 This effort has roughly been in progress over two years, though it
 stopped and restarted several times along the way.

 If anyone has comments or suggestions, we still have a week before the
 final version is due, and regardless we plan to continue updating our
 online version for the forseeable future.


 --
 Dive into the World of Parallel Programming The Go Parallel Website,
 sponsored
 by Intel and developed in partnership with Slashdot Media, is your hub
 for all
 things parallel software development, from weekly thought leadership
 blogs to
 news, videos, case studies, tutorials and more. Take a look and join the
 conversation now. http://goparallel.sourceforge.net/
 ___
 Bitcoin-development mailing list
 Bitcoin-development@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/bitcoin-development




 --
 Dive into the World of Parallel Programming The Go Parallel Website,
 sponsored
 by Intel and developed in partnership with Slashdot Media, is your hub for
 all
 things parallel software development, from weekly thought leadership blogs
 to
 news, videos, case studies, tutorials and more. Take a look and join the
 conversation now. http://goparallel.sourceforge.net/
 ___
 Bitcoin-development mailing list
 Bitcoin-development@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/bitcoin-development


--
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/___
Bitcoin-development mailing list
Bitcoin-development@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bitcoin-development