[bitcoin-dev] Taproot (and graftroot) complexity (reflowed)

2020-02-09 Thread Bryan Bishop via bitcoin-dev
Apologies for my previous attempt at relaying the message- it looks like the emails got mangled on the archive. I am re-sending them in this combined email with what I hope will be better formatting. Again this is from some nym that had trouble posting to this mailing list; I didn't see any emails

Re: [bitcoin-dev] Taproot (and graftroot) complexity (reflowed)

2020-02-09 Thread David A. Harding via bitcoin-dev
On Sun, Feb 09, 2020 at 02:47:29PM -0600, Anon via Bryan Bishop via bitcoin-dev wrote: > 1) Is Taproot actually more private than bare MAST and Schnorr separately? Yes. > What are the actual anonymity set benefits compared to doing the separately? When schnorr and taproot are done together, all

Re: [bitcoin-dev] Taproot (and graftroot) complexity (reflowed)

2020-02-10 Thread Jonas Nick via bitcoin-dev
I agree with most of the comments so far, but the group brings up an often overlooked point with respect to the privacy benefits of taproot. In the extreme case, if there would be no policies that have both a key and a script spend path, then taproot does not improve anonymity sets compared to the

Re: [bitcoin-dev] Taproot (and graftroot) complexity (reflowed)

2020-02-14 Thread Jeremy via bitcoin-dev
Dave, I think your point: *When schnorr and taproot are done together, all of the following transaction types can be part of the same set: - single-sig spends (similar to current use of P2PKH and P2WPKH) - n-of-n spends with musig or equivalent (similar to current use of

Re: [bitcoin-dev] Taproot (and graftroot) complexity (reflowed)

2020-02-14 Thread David A. Harding via bitcoin-dev
On Fri, Feb 14, 2020 at 12:07:15PM -0800, Jeremy via bitcoin-dev wrote: > Is the same if Schnorr + Merkle Branch without Taproot optimization, unless > I'm missing something in one of the cases? That's fair. However, it's only true if everyone constructs their merkle tree in the same way, with a

Re: [bitcoin-dev] Taproot (and graftroot) complexity (reflowed)

2020-02-18 Thread Pieter Wuille via bitcoin-dev
On Fri, 14 Feb 2020 at 14:37, David A. Harding via bitcoin-dev wrote: > > On Fri, Feb 14, 2020 at 12:07:15PM -0800, Jeremy via bitcoin-dev wrote: > > Is the same if Schnorr + Merkle Branch without Taproot optimization, unless > > I'm missing something in one of the cases? > > That's fair. However