Re: [bitcoin-dev] BIP proposal for Lightning-oriented multiaccount multisig HD wallets

2017-08-30 Thread Thomas Voegtlin via bitcoin-dev
On 29.08.2017 12:19, Simone Bronzini via bitcoin-dev wrote: > 2. SegWit addresses: > since mixing SegWit and non-SegWit addresses on the same BIP44 structure > could lead to UTXOs not being completely recognised by old wallets, > BIP49 was proposed to separate the key space. This will lead to

Re: [bitcoin-dev] BIP49 Derivation scheme changes

2017-09-02 Thread Thomas Voegtlin via bitcoin-dev
On 30.08.2017 09:24, shiva sitamraju via bitcoin-dev wrote: > > 2. Segwit wallet seed words have a different format which is incompatible > with previous wallet seed words. This encodes the information that this > wallet is segwit in the seed words itself. We need to define a structure > for t

[bitcoin-dev] Proposal: bip32 version bytes for segwit scripts

2017-09-05 Thread Thomas Voegtlin via bitcoin-dev
BIP32 extended public/private keys have version bytes that result in the user visible xpub/xprv prefix. The BIP's recommendation is to use different version bytes for other networks (such as tpub/tprv for testnet) I would like to use additional version bytes to indicate the type of output script u

Re: [bitcoin-dev] BIP49 Derivation scheme changes

2017-09-05 Thread Thomas Voegtlin via bitcoin-dev
On 05.09.2017 09:10, shiva sitamraju via bitcoin-dev wrote: > Hi, > > Thanks Thomas. The procedure described in > http://docs.electrum.org/en/latest/seedphrase.html is really what I was > looking for ! I really don't see any point of following BIP49, If possible > it would be great if you can pr

Re: [bitcoin-dev] Proposal: bip32 version bytes for segwit scripts

2017-09-05 Thread Thomas Voegtlin via bitcoin-dev
On 05.09.2017 19:03, Luke Dashjr wrote: > It seems desirable to use the same seed for all different script formats... That does not seem desirable to everybody. If you want to guarantee that users will be able to recover all their funds from their mnemonic seed (and that is what they expect),

Re: [bitcoin-dev] Proposal: bip32 version bytes for segwit scripts

2017-09-06 Thread Thomas Voegtlin via bitcoin-dev
On 05.09.2017 21:00, Kabuto Samourai wrote: > > The Electrum approach is nice but may not go far enough, as xpub and zpub > both list "P2PKH or P2SH." Why not expand the number of version prefixes to > eliminate the ambiguity? > I agree that this would make sense if we had done it from the sta

Re: [bitcoin-dev] Proposal: Extended serialization format for BIP-32 wallets

2017-09-06 Thread Thomas Voegtlin via bitcoin-dev
On 07.09.2017 00:29, Pavol Rusnak via bitcoin-dev wrote: > The discussion about changing bip32 version bytes for SegWit got me > thinking and I ended up with what I think is the best proposal: > > https://github.com/satoshilabs/slips/blob/master/slip-0032.md > > (It is hosted in SL repo for now

Re: [bitcoin-dev] Proposal: Extended serialization format for BIP-32 wallets

2017-09-07 Thread Thomas Voegtlin via bitcoin-dev
On 07.09.2017 18:23, Pavol Rusnak wrote: > On 07/09/17 06:29, Thomas Voegtlin via bitcoin-dev wrote: >> A solution is still needed to wallets who do not wish to use BIP43 > > What if we added another byte field OutputType for wallets that do not > follow BIP43? > >

Re: [bitcoin-dev] Proposal: Extended serialization format for BIP-32

2017-09-12 Thread Thomas Voegtlin via bitcoin-dev
-32 >> wallets (Thomas Voegtlin) >> >> >> -- >> >> Message: 1 >> Date: Thu, 7 Sep 2017 21:35:49 +0200 >> From: Andreas Schildbach >> To: bitcoin-dev@lists.linuxfoundation.org &g

[bitcoin-dev] proposal: extend WIF format for segwit

2017-09-15 Thread Thomas Voegtlin via bitcoin-dev
The Wallet Import Format (WIF) currently appends a 0x01 byte after the raw private key, when that key needs to be used in conjunction with a compressed public key. This allows wallets to associate a single Bitcoin address to a WIF key. It would be useful to extend the semantics of that byte, to si

Re: [bitcoin-dev] proposal: extend WIF format for segwit

2017-09-17 Thread Thomas Voegtlin via bitcoin-dev
On 17.09.2017 04:29, Pieter Wuille wrote: > > This has been a low-priority thing for me, though, and the computation work > to find a good checksum is significant. > Thanks for the info. I guess this means that a bech32 format for private keys is not going to happen soon. Even if such a format w

[bitcoin-dev] Electrum 3.0 release

2017-11-02 Thread Thomas Voegtlin via bitcoin-dev
Electrum 3.0 was tagged and released yesterday night. Release notes: # Release 3.0 - Uncanny Valley (November 1st, 2017) * The project was migrated to Python3 and Qt5. Python2 is no longer supported. If you cloned the source repository, you will need to run "python3 setup.py install" i

[bitcoin-dev] JSONRPC vulnerability in Electrum 2.6 to 3.0.4

2018-01-10 Thread Thomas Voegtlin via bitcoin-dev
A vulnerability has been found in Electrum, and patched in version 3.0.5. Please update your software if you are running an earlier version. The following is a copy of the summary and guidelines we posted on our website: https://github.com/spesmilo/electrum-docs/blob/master/cve.rst A CVE number f

Re: [bitcoin-dev] Bip44 extension for P2SH/P2WSH/...

2016-05-15 Thread Thomas Voegtlin via bitcoin-dev
Le 14/05/2016 18:14, Jonas Schnelli via bitcoin-dev a écrit : > > AFAIK: Bip39 import (cross-wallet) is not supported by [...] Electrum [2] . > That is correct. There are several reasons why I decided not to use BIP39 in Electrum. One of them was that BIP39 seed phrases do not include a versio

Re: [bitcoin-dev] Even more proposed BIP extensions to BIP 0070

2016-06-22 Thread Thomas Voegtlin via bitcoin-dev
IMO the moderate success of BIP70 is caused by its complexity. Since the amount of data in a BIP70 payment request does not fit in a bitcoin: URI, an https server is required to serve the requests. Only large merchants are able to maintain such an infrastructure; (even Coinbase recently failed at

Re: [bitcoin-dev] BIP Status updates (including to Active/Final Status) - BIP 39, BIP 43, BIP 44, BIP 67, BIP 111, BIP 125, BIP 130

2016-08-24 Thread Thomas Voegtlin via bitcoin-dev
Le 23/08/2016 à 22:12, Luke Dashjr via bitcoin-dev a écrit : > BIP 39: Mnemonic code for generating deterministic keys > - Used by many wallets and hundreds of thousands of users. > > BIP 44: Multi-Account Hierarchy for Deterministic Wallets > - Appears to be implemented by multiple wallets. > I

Re: [bitcoin-dev] BIP Status updates (including to Active/Final Status) - BIP 39, BIP 43, BIP 44, BIP 67, BIP 111, BIP 125, BIP 130

2016-08-25 Thread Thomas Voegtlin via bitcoin-dev
Le 25/08/2016 à 09:39, Jonas Schnelli via bitcoin-dev a écrit : > (I think this case if not completely unrealistic): > > What would happen, if a user gave out 21 addresses, then address0 had > receive funds in +180 days after generation where address21 had receive > funds immediately (all other

[bitcoin-dev] Proposal: Soft Fork Threshold Signaling

2017-04-13 Thread Thomas Voegtlin via bitcoin-dev
Disclaimer: I am fully supportive of Segregated Witness and its activation by users through BIP148. However, I also believe that a soft fork would be less risky if it was initially activated by miners, before the date set in BIP148. This proposal is not intended to replace UASF, but to mitigate the

Re: [bitcoin-dev] Proposal: Soft Fork Threshold Signaling

2017-04-13 Thread Thomas Voegtlin via bitcoin-dev
Hi Sancho, I saw your proposal. However, my point is that the threshold should be part of the signaling, and not fixed in the soft-fork proposal. I agree that coinbase space might be a limitation. To avoid this, I realize that the threshold could be encoded in the version bits. We have 32 versio

Re: [bitcoin-dev] Proposal: Soft Fork Threshold Signaling

2017-04-13 Thread Thomas Voegtlin via bitcoin-dev
I think it is better not to use the coinbase, because it might collide with other proposals, and because coinbase is not part of the block header. I agree that a small set of standard threshold may be sufficient; a one percent resolution is probably not needed. If we use 4 bits we can encode 15 di

Re: [bitcoin-dev] Proposal: extend bip70 with OpenAlias

2015-07-18 Thread Thomas Voegtlin via bitcoin-dev
Le 14/07/2015 19:29, Justin Newton a écrit : > Hi there. You are correct that we are a company providing a service, > however, that service is also based on an open standard which we are > proposing. I'll be honest that we haven't done the greatest job in > promoting the standard so far. More c

Re: [bitcoin-dev] Proposal: extend bip70 with OpenAlias

2015-07-19 Thread Thomas Voegtlin via bitcoin-dev
Hi Mike, The reason why I would like to extend BIP70 is because it is currently not being used in transactions between end-users. BIP70 works very well in B2C situations, where users buy products from a website. However, end-users still share Bitcoin addresses. Before BIP70 was written, I had pro

Re: [bitcoin-dev] Proposal: extend bip70 with OpenAlias

2015-07-20 Thread Thomas Voegtlin via bitcoin-dev
Le 19/07/2015 01:01, Justin Newton via bitcoin-dev a écrit : >> >> I would rather not make Namecoin part of the standard, because .bit >> records cannot be verified easily by lightweight/spv wallets; they would >> need a copy of the Namecoin blockchain for that. > > You are the second person to

Re: [bitcoin-dev] Proposal: extend bip70 with OpenAlias

2015-07-20 Thread Thomas Voegtlin via bitcoin-dev
hi Mike, I hope you had a good trip! > To get more specific, DNSSEC uses RSA 1024 bit. This causes two problems: > >1. A DNSSEC proof is large, bytes wise. Even a single RSA signature >won't fit nicely in a QR code, I think. > >2. 1024 bit is the absolute minimum strength you can g

Re: [bitcoin-dev] Proposal: extend bip70 with OpenAlias

2015-07-20 Thread Thomas Voegtlin via bitcoin-dev
Le 20/07/2015 16:42, Mike Hearn a écrit : >> >> In my previous post, I was suggesting to *not* include the proof in the >> request, because the payer can download it independently. Only the final >> signature is needed. What makes DNSSEC interesting is not the size of >> the proof, but rather the

Re: [bitcoin-dev] Proposal: extend bip70 with OpenAlias

2015-07-20 Thread Thomas Voegtlin via bitcoin-dev
Le 20/07/2015 17:14, Mike Hearn a écrit : > > By "alias" you mean domain name? I'm not sure what DNS key means in this > context. > yes, sorry, I mean the domain name corresponding to the TXT record. it's called 'alias' in the context of OpenAlias. > I'm still not really convinced that a dom

Re: [bitcoin-dev] QR code alternatives (was: Proposal: extend bip70 with OpenAlias)

2015-07-21 Thread Thomas Voegtlin via bitcoin-dev
Le 20/07/2015 16:40, Mike Hearn a écrit : > > If we accept a single payment address i.e. no clever tricks around merge > avoidance, such a QR code could look like this: > > bitcoin:1aBcD1234?x=serialized_payment_request > > However this requires text mode and wastes bytes at the front for

[bitcoin-dev] Making Electrum more anonymous

2015-07-22 Thread Thomas Voegtlin via bitcoin-dev
Hello, Although Electrum clients connect to several servers in order to fetch block headers, they typically request address balances and address histories from a single server. This means that the chosen server knows that a given set of addresses belong to the same wallet. That is true even if Ele

Re: [bitcoin-dev] Proposal: extend bip70 with OpenAlias

2015-07-23 Thread Thomas Voegtlin via bitcoin-dev
Le 17/07/2015 03:01, Justin Newton via bitcoin-dev a écrit : >> 3> We use a 2 tier lookup format. [...] >> >> We do the same thing, except in a single call. [...] > > We looked at doing this in a single lookup as you did. With one or two > currencies this can be potentially more efficient. As

Re: [bitcoin-dev] Proposal: extend bip70 with OpenAlias

2015-07-23 Thread Thomas Voegtlin via bitcoin-dev
Le 23/07/2015 11:48, Thomas Voegtlin via bitcoin-dev a écrit : > > One benefit of having an intermediate "_wallet" level is to allow zone > delegation. Is that the reason for that choice? > Thinking about it, I think that it would be better to separate those two operat

Re: [bitcoin-dev] Electrum Server Speed Test

2015-07-23 Thread Thomas Voegtlin via bitcoin-dev
There is some room for optimization in the Electrum server: - the utxo database (patricia tree) should be made a binary tree. - the server is written in python, which is slow. I am not too worried about the short-term; a block takes on average 15s to process on my server. For example, here are t

Re: [bitcoin-dev] Proposal: extend bip70 with OpenAlias

2015-07-31 Thread Thomas Voegtlin via bitcoin-dev
Le 27/07/2015 23:51, Justin Newton via bitcoin-dev a écrit : > Thomas, > I think this is interesting and has some good thoughts behind it. For > clarity, are you recommending that the "_oa2" portion of the domain name be > "hidden" as a way to make it easier to delegate just wallet names from

[bitcoin-dev] MIN_STANDARD_TX_NONWITNESS_SIZE and OP_RETURN

2020-05-23 Thread Thomas Voegtlin via bitcoin-dev
Hello list, I have been trying to CPFP a transaction using OP_RETURN, because the remaining output value would have been lower than the dust threshold. The scriptPubkey of the output was OP_RETURN + OP_0, and there was a single p2wsh input. The result is a 60 bytes transaction (without witness),

[bitcoin-dev] BIP70 is dead. What now?

2021-02-19 Thread Thomas Voegtlin via bitcoin-dev
I never liked BIP70. It was too complex, had too many features, and when people discuss it, they do not even agree on what the main feature was. Nevertheless, there is ONE feature of BIP70 that I find useful: the fact that payment requests were signed. I am making this post to discuss this. When