ZmnSCPxj <[email protected]> writes: > Good morning Rusty, et al., > > >> Note that this means no payment secret is necessary, since the incoming >> `blinding` serves the same purpose. If we wanted to, we could (ab)use >> payment_secret as the first 32-bytes to put in Carol's enc1 (i.e. it's >> the ECDH for Carol to decrypt enc1). > > I confess to not reading everything in detail, but it seems to me that, with > payment point + scalar and path decorrelation, we need to establish a secret > with each hop anyway (the blinding scalar for path decorrelation), so if you > need a secret per hop, possibly this could be reused as well?
Indeed, this could be used the same way, though for that secret it can simply be placed inside the onion rather than passed alongside. Cheers, Rusty. _______________________________________________ Lightning-dev mailing list [email protected] https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev
