Re: [bitcoin-dev] Is BIP32's chain code needed?

2020-10-17 Thread Adam Back via bitcoin-dev
Another advantage of random access from BIP 32 vs iterated chain is that if there is a bit-flip or corruption, you don't destroy access to all future addresses, but only burn one utxo. Empirically not an entirely theoretical issue. I think the only thing i'd care about is bloating up the number

Re: [bitcoin-dev] Is BIP32's chain code needed?

2020-10-16 Thread Pieter Wuille via bitcoin-dev
On Tuesday, September 29, 2020 10:34 AM, Leonardo Comandini via bitcoin-dev wrote: > Hi all, > > BIP32 [1] says: "In order to prevent these from depending solely on the key > itself, we extend both private and public keys first with an extra 256 bits of > entropy. This extension, called the

Re: [bitcoin-dev] Is BIP32's chain code needed?

2020-10-05 Thread Christopher Allen via bitcoin-dev
Leondardo, There are a lot of sub-topics related to your questions that deserve at least some response. I was not involved deeply in bitcoin when BIPs 32/38/39/44/45 emerged, but they were not without some strong differences of opinion and controversy, some of which are reflected in challenges

[bitcoin-dev] Is BIP32's chain code needed?

2020-09-29 Thread Leonardo Comandini via bitcoin-dev
Hi all, BIP32 [1] says: "In order to prevent these from depending solely on the key itself, we extend both private and public keys first with an extra 256 bits of entropy. This extension, called the chain code...". My argument is that the chain code is not needed. To support such claim, I'll