Re: [bitcoin-dev] Minor DoS vulnerability in BIP144 lack of tx witness data size limit

2022-10-11 Thread Greg Sanders via bitcoin-dev
There are a number of issues with adding arbitrary size restrictions to
consensus(I personally think it's additional complexity for negative gain),
but most of all this may resolve in burned coins.

On Tue, Oct 11, 2022 at 6:22 AM Loki Verloren via bitcoin-dev <
bitcoin-dev@lists.linuxfoundation.org> wrote:

>
> The recent 998 of 999 multisig segwit transaction highlights a problem
> with BIP144. As the solution applied for btcd shows, effectively a single
> transaction witness can be the same as the maximum block size.
>
> 11000 bytes may not be so unreasonable but now there is a special case
> with a block over 33k worth of witness data.
>
> A concrete limit should be set on the maximum size of a transaction
> witness, and this should be discussed in a more general sense about total
> transaction sizes.
>
> In the absence of a specification, it becomes impossible to properly
> implement and the status quo devolves to the actual implementation in the
> bitcoin core repository code.
>
> I think the weight calculation should escalate exponentially to discourage
> putting transactions like this on the chain. The price was equivalent to
> about $5 to do this.
>
> ___
> bitcoin-dev mailing list
> bitcoin-dev@lists.linuxfoundation.org
> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
>
___
bitcoin-dev mailing list
bitcoin-dev@lists.linuxfoundation.org
https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev


[bitcoin-dev] Minor DoS vulnerability in BIP144 lack of tx witness data size limit

2022-10-11 Thread Loki Verloren via bitcoin-dev

The recent 998 of 999 multisig segwit transaction highlights a problem with 
BIP144. As the solution applied for btcd shows, effectively a single 
transaction witness can be the same as the maximum block size.
11000 bytes may not be so unreasonable but now there is a special case with a 
block over 33k worth of witness data.

A concrete limit should be set on the maximum size of a transaction witness, 
and this should be discussed in a more general sense about total transaction 
sizes.

In the absence of a specification, it becomes impossible to properly implement 
and the status quo devolves to the actual implementation in the bitcoin core 
repository code.

I think the weight calculation should escalate exponentially to discourage 
putting transactions like this on the chain. The price was equivalent to about 
$5 to do this.

publickey - loki@cybriq.systems - 0x7BC3C653.asc
Description: application/pgp-keys


signature.asc
Description: OpenPGP digital signature
___
bitcoin-dev mailing list
bitcoin-dev@lists.linuxfoundation.org
https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev