Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-05-04 Thread ZmnSCPxj via bitcoin-dev
Good morning CB, > Chain analysis doesn't in fact know that 1-input-1-output transfers are > self-transfers, this is merely a heuristic that can be flawed. For > example I accept donations in bitcoin and a surprising number of them > are 1-input-1-output or multi-input-1-output, presumably the

Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-05-03 Thread Chris Belcher via bitcoin-dev
Hello ZmnSCPxj, >>> This "as long as the inputs that should be separate are not co-spent" is >>> precisely what mixdepths protect against, which is why I think some kind of >>> mixdepth facility will still matter in CoinSwap. >>> Still, you have convinced me that, for the purpose of

Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-05-01 Thread ZmnSCPxj via bitcoin-dev
Good morning CB, > > This "as long as the inputs that should be separate are not co-spent" is > > precisely what mixdepths protect against, which is why I think some kind of > > mixdepth facility will still matter in CoinSwap. > > Still, you have convinced me that, for the purpose of

Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-04-30 Thread Chris Belcher via bitcoin-dev
Hello ZmnSCPxj, On 30/04/2020 09:54, ZmnSCPxj wrote: > Good morning CB, > > >> Equal-output-coinjoins and JoinMarket also have a version of the >> common-input-ownership-heuristic (CIOH), because its often possible to >> separate the inputs into sets of their owners of a equal-output-coinjoin

Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-04-30 Thread ZmnSCPxj via bitcoin-dev
Good morning CB, > Equal-output-coinjoins and JoinMarket also have a version of the > common-input-ownership-heuristic (CIOH), because its often possible to > separate the inputs into sets of their owners of a equal-output-coinjoin > using the input amounts. CoinSwap can be combined with

Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-04-29 Thread ZmnSCPxj via bitcoin-dev
Good morning CB, I have been thinking about CoinSwap for a good while as well. Here are some very unorganized thoughts. It wold be nice to interoperate with JoinMarket, i.e. have a JoinMarket maker that also provides CoinSwap services using the same UTXOs. However, this requires us to retain

Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-04-28 Thread Chris Belcher via bitcoin-dev
On 24/04/2020 02:34, ZmnSCPxj via bitcoin-dev wrote: > Good morning Germán, > > >> With regards to trying to tackle the problem of value-based correlations, >> wouldn't it be possible to try to model the solution after the >> equal-sum-subset problem (np complete problem)( >>

Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-04-24 Thread German Luna via bitcoin-dev
Good morning ZmnSCPxj, The issues you point out are indeed important to note. Thank you for your wonderful feedback! * There is a practical limit to the number of UTXOs you would be willing to > receive in the swap. > * Every UTXO you receive increases the potential fee you have to pay to >

Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-04-23 Thread ZmnSCPxj via bitcoin-dev
Good morning Germán, > With regards to trying to tackle the problem of value-based correlations, > wouldn't it be possible to try to model the solution after the > equal-sum-subset problem (np complete problem)( >

Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-04-23 Thread German Luna via bitcoin-dev
Good morning ZmnSCPxj, Thank you for your excellent feedback! Indeed, with a little protocol-level sugar so that the coins being swapped get paid out of different pubkeys. I read your article. Excellent idea on the randomized locktimes! I've still to read the details of what S6 amounts to but

Re: [bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-04-23 Thread ZmnSCPxj via bitcoin-dev
Good morning Germán, It looks to me like this is CoinSwap with Schnorr Scriptless Scripts. * https://joinmarket.me/blog/blog/coinswaps/ * https://joinmarket.me/blog/blog/flipping-the-scriptless-script-on-schnorr/ I also recently put up an article on extending such a protocol across 3 or more

[bitcoin-dev] Fwd: (Semi)Traceless 2-party coinjoin off-chain protocol using schnorr signatures

2020-04-22 Thread German Luna via bitcoin-dev
Hello All, ## Objective * Make atomic swaps within the same chain possible in a traceless way * Achieving traceless same-chain atomic-swaps effectively turns an entire chain into a (P2PKH) mixer by default ## Proposed solution Similar to the way that atomic swaps would work with schnorr