Re: [Bitcoin-development] [RFC] [BIP proposal] Dealing with malleability

2014-02-20 Thread Michael Gronager
one year, which is better than two, but it would have been nice to get it faster... /M On Feb 19, 2014, at 10:11 PM, Pieter Wuille wrote: > On Wed, Feb 19, 2014 at 9:28 PM, Michael Gronager wrote: >> I think that we could guarantee fewer incidents by making version 1 >> transac

Re: [Bitcoin-development] [RFC] [BIP proposal] Dealing with malleability

2014-02-19 Thread Michael Gronager
014 at 3:11 PM, Michael Gronager wrote: >> Why introduce a new transaction version for this purpose ? Wouldn't it be >> more elegant to simply let: >> >> 1. the next bitcoin version "prettify" all relayed transactions as >> deterministic transaction

Re: [Bitcoin-development] [RFC] [BIP proposal] Dealing with malleability

2014-02-19 Thread Michael Gronager
Why introduce a new transaction version for this purpose ? Wouldn't it be more elegant to simply let: 1. the next bitcoin version "prettify" all relayed transactions as deterministic transactions fulfilling the scheme 1-6 effectively blocking any malleability attack? If miners would upgrade the

Re: [Bitcoin-development] Network propagation speeds

2013-11-25 Thread Michael Gronager
Hi Christian, Cool - thanks for posting - agree, that it would be nice to normalize the results with block size - so divide by size and: 1. see if there is a correlation (we all presume there still is) 2. plot the delay graph as e.g. normalized to the averaged blocksize or lets define a "standard

Re: [Bitcoin-development] Even simpler minimum fee calculation formula: f > bounty*fork_rate/average_blocksize

2013-11-15 Thread Michael Gronager
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> >> Q = Total pool size (fraction of all mining power) q = My mining >> power (do.) e = fraction of block fee that pool reserves >> > > Unfortunately the math doesn't work that way. For any Q, a bigger > Q gives you a higher return. Remember that

Re: [Bitcoin-development] Even simpler minimum fee calculation formula: f > bounty*fork_rate/average_blocksize

2013-11-15 Thread Michael Gronager
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 15/11/13, 11:32 , Peter Todd wrote: > alpha = (1/113)*600s/134kBytes = 39.62uS/byte = 24kB/second > > Which is atrocious... alpha = P_fork*t_block/S = 1/113*454000/134 = 29ms/kb or 272kbit pr second - if you assume this is a bandwidth then I ag

Re: [Bitcoin-development] Even simpler minimum fee calculation formula: f > bounty*fork_rate/average_blocksize

2013-11-15 Thread Michael Gronager
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Peter, Love to see things put into formulas - nice work! Fully agree on the your fist section: As latency determines maximum block earnings, define a 0-latency (big-miner never orphans his own blocks) island and growing that will of course result

Re: [Bitcoin-development] Even simpler minimum fee calculation formula: f > bounty*fork_rate/average_blocksize

2013-11-13 Thread Michael Gronager
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi John, Thanks for the feedback - comments below: >> However, it occurred to me that things can in fact be calculated even >> simpler: The measured fork rate will mean out all the different pool >> sizes and network latencies and will as such provid

Re: [Bitcoin-development] Even simpler minimum fee calculation formula: f > bounty*fork_rate/average_blocksize

2013-11-13 Thread Michael Gronager
network wisdom ;) On 13/11/13, 12:52 , Michael Gronager wrote: > Last week I posted a writeup: "On the optimal block size and why > transaction fees are 8 times too low (or transactions 8 times too big)". > > Peter Todd made some nice additions to it including different pool si

[Bitcoin-development] Even simpler minimum fee calculation formula: f > bounty*fork_rate/average_blocksize

2013-11-13 Thread Michael Gronager
Last week I posted a writeup: "On the optimal block size and why transaction fees are 8 times too low (or transactions 8 times too big)". Peter Todd made some nice additions to it including different pool sizes into the numbers. However, it occurred to me that things can in fact be calculated eve

Re: [Bitcoin-development] On the optimal block size and why transaction fees are 8 times too low (or transactions 8 times too big)

2013-11-07 Thread Michael Gronager
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 7/11/13, 21:31 , Peter Todd wrote: >> Final conclusions is that the fee currently is too small and that >> there is no need to keep a maximum block size, the fork >> probability will automatically provide an incentive to not let >> block grows into

Re: [Bitcoin-development] On the optimal block size and why transaction fees are 8 times too low (or transactions 8 times too big)

2013-11-07 Thread Michael Gronager
Mike, Pieter, My writeup outlines a framework for good approximation to a minimal fee as well as the optimal block size. The model has basically just one parameter, the propagation time - if that goes down, so can the fee. (Well there is another parameter too, the time btw blocks, which currently

[Bitcoin-development] On the optimal block size and why transaction fees are 8 times too low (or transactions 8 times too big)

2013-11-07 Thread Michael Gronager
Following the discussion on the recent mining sybil trick, I reread the article on block propagation by Decker et al.* and decided to use it for doing a proper estimate of transaction fee size and optimal block size. The propagation of a block depends on and is roughly proportional to its size. Fu

Re: [Bitcoin-development] Auto-generated miner backbone

2013-11-04 Thread Michael Gronager
"We propose a simple, backwards-compatible change to the Bitcoin protocol to address this problem and raise the threshold. Specifically, when a miner learns of competing branches of the same length, it should propagate all of them, and choose which one to mine on uniformly at random." So only in t

Re: [Bitcoin-development] Auto-generated miner backbone

2013-11-04 Thread Michael Gronager
On 4/11/13, 12:26 , Mike Hearn wrote: > W.R.T. this paper and the oft-discussed miner backbone, > > http://arxiv.org/pdf/1311.0243v1.pdf > > I'm wondering about an alternative protocol change that perhaps has less > subtle implications than their suggested change. The suggested change is actu

Re: [Bitcoin-development] is there a way to do bitcoin-staging?

2013-10-14 Thread Michael Gronager
Hi Alan, What you describe in the ultimate blockchain compression I have already coded the authenticated datastructure part of in libcoin (https://github.com/libcoin/libcoin) - next step is to include a p2pool style mining, where a parallel chain serves several purposes: 1. to validate the root ha

Re: [Bitcoin-development] HTTP REST API for bitcoind

2013-07-23 Thread Michael Gronager
> > The only way to do this safely at an SPV security assumption, is by > having an address-indexed committed merkle UTXO-set tree, like the > one proposed by Alan Reiner, and being implemented by Mark > Friedenback. I know Michael Gronager has something similar implemented, >

Re: [Bitcoin-development] HTTP REST API for bitcoind

2013-07-23 Thread Michael Gronager
Hi Andreas / Jeff, Access to the UTXO set can be done using libcoin (see the coinexplorer example), which also has a rest interface. Access to the UTXO set pr address/script requires indexing of all scripts, which was easy in libcoin as the blockchain is stored in a sqlite database. Integrating

Re: [Bitcoin-development] SPV bitcoind? (was: Introducing BitcoinKit.framework)

2013-07-18 Thread Michael Gronager
Hi Bazyli, Just did a fresh build based on git (Xcode) - had one issue: the paillier and account tests were missing - please comment them out in tests/CMakeLists.txt, then coinexplorer should build nicely. Note I did a git push as well, so you need to do a git pull first. /Michael

Re: [Bitcoin-development] SPV bitcoind? (was: Introducing BitcoinKit.framework)

2013-07-18 Thread Michael Gronager
Hi Bazyli, I actually do my main development on Mac OSX, so it surprises me to hear - I build Xcode projects with libcoin daily on Mac OSX and linux, on Windows it is agreeable more of a fight to build. QT is really not needed, I kept it there for BitcoinQT, that was once part of the tree too,

Re: [Bitcoin-development] SPV bitcoind? (was: Introducing BitcoinKit.framework)

2013-07-17 Thread Michael Gronager
> Is that still accurate Michael? > The 90 minutes is not - the blockchain has grown quite a lot since last year, and as for the 3.5 speed, I havn't tested it since Pieter's ultraprune - libcoin also has something similar to ultraprune, done directly in the sqlite database backend, but I shou

Re: [Bitcoin-development] SPV bitcoind? (was: Introducing BitcoinKit.framework)

2013-07-17 Thread Michael Gronager
Hi Wendell, What Peter describes (a hash of the current set of UTXOs as part of the coinbase) is already implemented in libcoin, on which you can easily build both a bitcoind and any client. Libcoin is a library originally based on the satoshi client, and as such it is compatible/replacable wit

Re: [Bitcoin-development] BIP0032

2013-05-27 Thread Michael Gronager
Which again means that the statement regarding Audits through the Master Public key, M, is wrong - only incoming and outgoing transaction of _publicly_ derived wallets will be part of the audit... Privately derived wallets cannot be obtained, though you could, without loss of security, share also t

Re: [Bitcoin-development] BIP0032

2013-05-27 Thread Michael Gronager
Commenting on my own mail... Rereading the BIP, it occurs to me that the private derivation is actually intentional. So: (m/i/j/k)*G = (M/i/j/k), but (m/i'/j/k)*G <> (M/i/j/k) (M/i'/j/k => ERROR) But: ((m/i')*G)/j/k = (m/i'/j/k)*G So, the motivation for the private derivation is to avoid the kno

[Bitcoin-development] BIP0032

2013-05-27 Thread Michael Gronager
Pieter, I was re-reading BIP0032, and checking some of the equations... It seems to me that there is something wrong (or I have missed something). As I see it there can only be one HMAC function, used for both private and public derivation - I assume that: [1] CKD((k_par, c_par), i) -> (k_i, c_i

Re: [Bitcoin-development] Hardware BitCoin wallet as part of Google Summer of Code

2013-04-29 Thread Michael Gronager
Are you familiar with this: http://code.google.com/p/opencryptotoken/ It does ecc and as it is based on an atmel micro controller, adding a display is pretty straight forward Michael On 29/04/2013, at 18.28, Peter Todd wrote: > On Mon, Apr 29, 2013 at 10:30:47PM +0800, Crypto Stick wrote:

Re: [Bitcoin-development] Ok to use 0.8.x?

2013-03-14 Thread Michael Gronager
> Bitcoin version 0.8.0 is safe to use for everything EXCEPT creating blocks. > > So: safe for everybody except solo miners / pool operators. And even solo miners / pool operators can use it if connected to the network only through a 0.7 node. ---

Re: [Bitcoin-development] Blocksize and off-chain transactions

2013-03-13 Thread Michael Gronager
I hear consensus that at some point we need a hardfork (== creating blocks that will not be accepted by <0.7 clients). Miners generate block, hence they are the ones who should filter themselves though some consensus. > But we cannot just drop support for old nodes. It is completely unreasona

Re: [Bitcoin-development] Blocksize and off-chain transactions

2013-03-13 Thread Michael Gronager
Please note that it was not 0.8 that had issues, but 0.7(and downwards). I really think changing features in 0.8 aiming for a fluffy limit to avoid lock object errors on 0.7 is the wrong way to go, and it will never cover for a similar situations in the future. Instead I would like to propose a

Re: [Bitcoin-development] Warning: many 0.7 nodes break on large number of tx/block; fork risk

2013-03-12 Thread Michael Gronager
>> Forks are caused by rejection criteria, hence: >> 1. If you introduce new rejection criteria in an upgrade miners should >> upgrade _first_. >> 2. If you loosen some rejection criteria miners should upgrade _last_. >> 3. If you keep the same criteria assume 2. > > And ... if you aren't aware t

Re: [Bitcoin-development] Warning: many 0.7 nodes break on large number of tx/block; fork risk

2013-03-12 Thread Michael Gronager
keeping nodes up to date. > > On Tue, Mar 12, 2013 at 12:44 PM, Pieter Wuille > wrote: >> On Tue, Mar 12, 2013 at 11:13:09AM +0100, Michael Gronager wrote: >>> Yes, 0.7 (yes 0.7!) was not sufficiently tested it had an undocumented and >>> unknown criteria fo

Re: [Bitcoin-development] Warning: many 0.7 nodes break on large number of tx/block; fork risk

2013-03-12 Thread Michael Gronager
Yes, 0.7 (yes 0.7!) was not sufficiently tested it had an undocumented and unknown criteria for block rejection, hence the upgrade went wrong. More space in the block is needed indeed, but the real problem you are describing is actually not missing space in the block, but proper handling of mem

Re: [Bitcoin-development] Blocking uneconomical UTXO creation

2013-03-11 Thread Michael Gronager
>> The point with UTXO is in the long run to be able to switch from a p2p >> network where everyone stores, validates and verifies everything to a DHT >> where the load of storing, validating and verifying can be shared. > > I believe you are confusing disjoint things. Nope, ahh well, I agree t

Re: [Bitcoin-development] Blocking uneconomical UTXO creation

2013-03-11 Thread Michael Gronager
The point with UTXO is in the long run to be able to switch from a p2p network where everyone stores, validates and verifies everything to a DHT where the load of storing, validating and verifying can be shared. If we succeed with that then I don't see a problem in a growing set of UTXO, may t

Re: [Bitcoin-development] Chain dust mitigation: Demurrage based Chain Vacuuming

2012-12-03 Thread Michael Gronager
> 1) Wouldn't the need to re-transact your coins to keep them safe from > "vultures", result in people frantically sending coins to themselves, and > thus expand the block chain, instead of reduce growth? Not at the rate suggested > 2) putting those hard limits in passes a value judgement that

Re: [Bitcoin-development] Chain dust mitigation: Demurrage based Chain Vacuuming

2012-12-03 Thread Michael Gronager
> If this were a proposal at the time Bitcoin was created, I would definitely > be in favor, but I feel we can't just change such a policy right now - it's > not what people signed up for when they started using the system. I also see > no way to implement this without a hard fork, which would r

[Bitcoin-development] Chain dust mitigation: Demurrage based Chain Vacuuming

2012-12-03 Thread Michael Gronager
(Also posted on the forum: https://bitcointalk.org/index.php?topic=128900.0) The amount of "dust" in the block chain is getting large and it is growing all the time. Currently 11% of unspent tx outputs (UTXO) are of 1Satoshi (0.0001BTC), 32% is less than 0.0001BTC and 60% is less than 0.001B

Re: [Bitcoin-development] Payment Protocol Proposal: Invoices/Payments/Receipts

2012-11-27 Thread Michael Gronager
> No, the point of using X509 certs is to get a verified identity (a > domain name) on the receipt, this is needed for multi-factor > authentication. You can't do that without some kind of third party > asserting to an identity. Agree that you need a third party to verify identity. But the verifi

Re: [Bitcoin-development] Payment Protocol Proposal: Invoices/Payments/Receipts

2012-11-27 Thread Michael Gronager
> > If a merchant/payment processor is willing to take the risk of zero or > low confirmation transactions (because they are insured against it, > for example), they were allowed to reply "accepted" immediately, and > this would be a permanent proof of payment, even if the actual Bitcoin > transac

Re: [Bitcoin-development] Payment Protocol Proposal: Invoices/Payments/Receipts

2012-11-27 Thread Michael Gronager
> > The SignedReceipt message is useful in the sense that it shows > confirmation by the merchant, but if you don't get one, you can still > prove you paid the invoice. So from this perspective perhaps > SignedReceipt should be renamed to Acceptance or something like that, > and then the spec shou

Re: [Bitcoin-development] Payment Protocol Proposal: Invoices/Payments/Receipts

2012-11-27 Thread Michael Gronager
Short comments: * What if the SignedReceipt is not received AND the transactions IS posted on the p2p. Then you have payed for the goods, but you don't have a receipt. This could happen both from malice or system failures. ** Suggestion - sign the invoice with the key to which to send the transa

[Bitcoin-development] NATPMP and proxy support in libcoin

2012-02-29 Thread Michael Gronager
I just finished adding NATPMP, together with IDG UPnP, to libcoin. This enables libcoin/bitcoind to setup port mapping also on Apple routers (AirPort Extreme/Express/TimeMachine) and a few other that supports this protocol. libcoin/bitcoind first tried to setup mapping using UPnP, if that fails

[Bitcoin-development] Announcement: libcoin/BitcoinQt aka libcoinqt

2012-02-24 Thread Michael Gronager
I have just finalized porting BitcoinQt to build using libcoin as its basic crypto library. You can find the project at: https://github.com/ceptacle/libcoinqt It is based on the latest 0.6 branch of BitcoinQt. There are a few things not yet ported: * update the splash text while loading * some

[Bitcoin-development] libcoin - fixed post Feb 20 version 0.2 bug.

2012-02-24 Thread Michael Gronager
The bitcoin 0.2 protocol (the one with no checksums on version/verack) ended its life Feb 20th. I had forgot to add the date check in libcoin, so after Feb 20th you might have seen some errors in the log file (and having trouble getting blocks) - the code is fixed now... Also, there are a lot

Re: [Bitcoin-development] BitcoinQt eating 100% CPU

2012-02-23 Thread Michael Gronager
A follow up on my mail from the other day (got it send from the wrong email address...) I now exit the ipc thread at startup by inserting: void ipcThread(void* parg) { ipcShutdown(); return; Bitcoin-Qt is now running nicely using around 0.9% CPU. So it seems like the culprit was indeed l

[Bitcoin-development] off-topic: bitcoin-forum...

2012-02-19 Thread Michael Gronager
I am trying to post on the bitcoin forums (bitcointalk.org), but I am only able to reply and post on some of the regional forums?!?!? On the bitcoin dev and alternative client forums I have no post / reply button... I don't consider myself an IT illiterate, and I have even tried to create a new

[Bitcoin-development] BIP-12, 16, 17

2012-01-28 Thread Michael Gronager
Dear Bitcoiners, I have been following some of the debate on the various BIP suggestions for enabling e.g. multisignature transactions. ( First a little rant - it seems like the discussion takes place in at least 5 different forums plus the IRC, this is so annoying. Please keep the discussion a