Re: [bitcoin-dev] Time to worry about 80-bit collision attacks or not?

2016-01-10 Thread Peter Todd via bitcoin-dev
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10 January 2016 22:57:15 GMT-05:00, Rusty >Cheers, >Rusty. >[1] Weirdly, the bitcoin network is doing this much work every 57 >days, for about $92M. If that's all the attack costs, it's under >1M in 10 years. Don't get too caught up in

Re: [bitcoin-dev] Time to worry about 80-bit collision attacks or not?

2016-01-10 Thread Rusty Russell via bitcoin-dev
Gavin Andresen via bitcoin-dev writes: > How many years until we think a 2^84 attack where the work is an ECDSA > private->public key derivation will take a reasonable amount of time? vanitygen can generate keypairs pretty fast (on my CPU it's comparable with hashing time), and there are ways to