Re: [bitcoin-dev] BIP39 seeds

2018-12-23 Thread Pavol Rusnak via bitcoin-dev
On 22/12/2018 00:58, Aymeric Vitte via bitcoin-dev wrote: > Has anybody already looked at this: given N randomly chosen words > belonging to a BIP39 2048 words dictionary, what is the probability to > get a "valid" BIP39 seed (ie with the right checksum)? 1:256 for 24 words 1:16 for 12 words

Re: [bitcoin-dev] BIP39 seeds

2018-12-23 Thread Eric Scrivner via bitcoin-dev
Quite interesting. Not familiar with prior art here, but would be interested in what your results are showing if you’re willing to share? On Sun, Dec 23, 2018 at 11:44 Aymeric Vitte via bitcoin-dev < bitcoin-dev@lists.linuxfoundation.org> wrote: > Has anybody already looked at this: given N

Re: [bitcoin-dev] Safer NOINPUT with output tagging

2018-12-23 Thread ZmnSCPxj via bitcoin-dev
Good morning Johnson, > Generally speaking, I think walletless protocol is needed only when you want > to rely a third party to open a offchain smart contract. It could be > coinswap, eltoo, or anything similar. I think a third party would be pointless in general, but then I am strongly

Re: [bitcoin-dev] Safer NOINPUT with output tagging

2018-12-23 Thread Johnson Lau via bitcoin-dev
> On 22 Dec 2018, at 10:25 PM, ZmnSCPxj wrote: > > Good morning Johnson, > >> Generally speaking, I think walletless protocol is needed only when you want >> to rely a third party to open a offchain smart contract. It could be >> coinswap, eltoo, or anything similar. > > I think a third

Re: [bitcoin-dev] BIP39 seeds

2018-12-23 Thread Jameson Lopp via bitcoin-dev
I believe it would depend upon the entropy used for the seed, as that would affect how many bits the checksum represents. https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki#Generating_the_mnemonic So for a 24 word / 256 bit mnemonic the checksum is 8 bits, thus there are 8 valid

Re: [bitcoin-dev] Safer sighashes and more granular SIGHASH_NOINPUT

2018-12-23 Thread Johnson Lau via bitcoin-dev
> On 23 Dec 2018, at 12:26 PM, Anthony Towns wrote: > > On Sat, Dec 22, 2018 at 02:54:42AM +0800, Johnson Lau wrote: >> The question I would like to ask is: is OP_CODESEPARATOR useful under >> taproot? Generally speaking, CODESEPARATOR is useful only with conditional >> opcodes (OP_IF etc),

Re: [bitcoin-dev] Safer sighashes and more granular SIGHASH_NOINPUT

2018-12-23 Thread Anthony Towns via bitcoin-dev
On Sat, Dec 22, 2018 at 02:54:42AM +0800, Johnson Lau wrote: > The question I would like to ask is: is OP_CODESEPARATOR useful under > taproot? Generally speaking, CODESEPARATOR is useful only with conditional > opcodes (OP_IF etc), and conditional opcodes are mostly replaced by merklized >

[bitcoin-dev] BIP39 seeds

2018-12-23 Thread Aymeric Vitte via bitcoin-dev
Has anybody already looked at this: given N randomly chosen words belonging to a BIP39 2048 words dictionary, what is the probability to get a "valid" BIP39 seed (ie with the right checksum)? The result looks (very) surprising to me and might have some use cases, just would like to know if this