On Fri, Jun 1, 2018 at 2:52 AM, Olaoluwa Osuntokun via bitcoin-dev
wrote:
> One notable thing that I left off is the proposed change to use the previous
> output script rather than the outpoint. Modifying the filters in this
> fashion would be a downgrade in the security model for light clients, a
Hi y'all,
I've made a PR to the BIP repo to modify BIP 158 based on this thread, and
other recent threads giving feedback on the current version of the BIP:
* https://github.com/bitcoin/bips/pull/687
I've also updated the test vectors based on the current parameters (and
filter format), and al
Rusty Russell writes:
> AFAICT the optimal DoS is where:
>
> 1. Attacker sends a 100,000 vbyte tx @1sat/vbyte.
> 2. Replaces it with a 108 vbyte tx @2sat/vbyte which spends one of
> those inputs.
> 3. Replaces that spent input in the 100k tx and does it again.
>
> It takes 3.5 seconds to pr
On Fri, May 25, 2018 at 3:14 AM, Johnson Lau wrote:
> A graftroot design like this is a strict subset of existing signature
> checking rules. If this is dangerous, the existing signature checking rules
> must be dangerous.
While you may be right in this situation, I'm not sure that conclusion
f
I’ve made a PR to add a new policy to disallow using SIGHASH_SINGLE without
matched output:
https://github.com/bitcoin/bitcoin/pull/13360
Signature of this form is insecure, as it commits to no output while users
might think it commits to one. It is even worse in non-segwit scripts, which is
e
Since 2016, I have made a number of proposals for the next generation of
script. Since then, there has been a lot of exciting development on this topic.
The most notable ones are Taproot and Graftroot proposed by Maxwell. It seems
the most logical way is to implement MAST and other new script fu
Apologies for brevity, noob here and just throwing out an idea in case it's
useful (probably already covered somewhere, but I haven't got time to do
all the necessary background research).
>From https://github.com/bitcoin/bitcoin/issues/13342
Suggestion: To make it more difficult for a malicious
