Re: [bitcoin-dev] Satoshilabs secret shared private key scheme

2018-01-09 Thread Russell O'Connor via bitcoin-dev
On Mon, Jan 8, 2018 at 7:39 AM, Pavol Rusnak via bitcoin-dev < bitcoin-dev@lists.linuxfoundation.org> wrote: > On 08/01/18 05:22, Gregory Maxwell wrote: > >> https://github.com/satoshilabs/slips/blob/master/slip-0039.md > > > > The 16-bit "checksum" based on sha2 seems pretty poor since basing >

Re: [bitcoin-dev] Satoshilabs secret shared private key scheme

2018-01-09 Thread jens via bitcoin-dev
Trezor's "plausible deniability" scheme could very well result in you going to jail for lying to border security, because it's so easy for them to simply brute force alternate passwords based on your seeds. With that, they have proof that you lied to customs, a serious offense. The passphrase

[bitcoin-dev] Suggestion to remove word from BIP39 English wordlist

2018-01-09 Thread Ronald van der Meer via bitcoin-dev
Hello guys, After reviewing some bitcoin improvement proposals, I noticed that one of the words that can be found on the BIP39 English wordlist is “satoshi”. I suggest removing this word from the list so it’s less obvious that it’s a bitcoin seed when found by a malicious third party.

Re: [bitcoin-dev] BIP 117 Feedback

2018-01-09 Thread Pieter Wuille via bitcoin-dev
On Jan 9, 2018 13:41, "Mark Friedenbach via bitcoin-dev" < bitcoin-dev@lists.linuxfoundation.org> wrote: The use of the alt stack is a hack for segwit script version 0 which has the clean stack rule. Anticipated future improvements here are to switch to a witness script version, and a new segwit

Re: [bitcoin-dev] BIP 117 Feedback

2018-01-09 Thread Mark Friedenbach via bitcoin-dev
The use of the alt stack is a hack for segwit script version 0 which has the clean stack rule. Anticipated future improvements here are to switch to a witness script version, and a new segwit output version which supports native MAST to save an additional 40 or so witness bytes. Either approach

[bitcoin-dev] BIP 117 Feedback

2018-01-09 Thread Rusty Russell via bitcoin-dev
I've just re-read BIP 117, and I'm concerned about its flexibility. It seems to be doing too much. The use of altstack is awkward, and makes me query this entire approach. I understand that CLEANSTACK painted us into a corner here :( The simplest implementation of tail recursion would be a