Re: [bitcoin-dev] Proposal: Force to do nothing for first 9 minutes to save 90% of mining energy

2021-05-15 Thread René Pickhardt via bitcoin-dev
Hey Michael, First I think the idea of "do nothing in the first 9 minutes" will unfortunately not be useful as the computed work is mainly there to prevent miners from altering the history of previous blocks. Thus following your suggesting would probably drastically decease the security of the net

Re: [bitcoin-dev] Proposal: Force to do nothing for first 9 minutes to save 90% of mining energy

2021-05-15 Thread Pavol Rusnak via bitcoin-dev
Please read the Bitcoin whitepaper. It's a very interesting read. -- Best Regards / S pozdravom, Pavol "stick" Rusnak Co-founder and CTO, SatoshiLabs On Sat, May 15, 2021, 23:57 Michael Fuhrmann via bitcoin-dev < bitcoin-dev@lists.linuxfoundation.org> wrote: > Hello, > > Bitcoin should create b

[bitcoin-dev] Proposal: Force to do nothing for first 9 minutes to save 90% of mining energy

2021-05-15 Thread Michael Fuhrmann via bitcoin-dev
Hello, Bitcoin should create blocks every 10 minutes in average. So why do miners need to mine the 9 minutes after the last block was found? It's not necessary. Problem: How to prevent "pre-mining" in the 9 minutes time window? Possible ideas for discussion: - (maybe most difficult) global net

Re: [bitcoin-dev] Sum of the keys attack on taproot

2021-05-15 Thread Ruben Somsen via bitcoin-dev
What Tim said is right. To add to that, you may also wish to read about MuSig: https://blockstream.com/2018/01/23/en-musig-key-aggregation-schnorr-signatures/ Cheers, Ruben On Sat, May 15, 2021 at 10:32 PM Tim Ruffing via bitcoin-dev < bitcoin-dev@lists.linuxfoundation.org> wrote: > On Sat, 2021

Re: [bitcoin-dev] Sum of the keys attack on taproot

2021-05-15 Thread Tim Ruffing via bitcoin-dev
On Sat, 2021-05-15 at 12:21 +0200, vjudeu via bitcoin-dev wrote: > All that is needed is producing a signature matching the sum of the > public keys used in taproot, which is "(a+b-a)*G",  This is simply not true. Taproot does not enable this, or any other form of "cross-input aggregation", i.

[bitcoin-dev] Sum of the keys attack on taproot

2021-05-15 Thread vjudeu via bitcoin-dev
We have some taproot address with private key "a" and public key "a*G", owned by Alice. Bob wants to take Alice's coins without her permission. He owns taproot address with private key "b" and public key "b*G". He knows "a*G" by exploring the chain and looking for P2TR outputs. To grab Alice's f