[bitcoin-dev] MAD-HTLC

2020-06-23 Thread Stanga via bitcoin-dev
Hi all, We'd like to bring to your attention our recent result concerning HTLC. Here are the technical report and a short post outlining the main points: * https://arxiv.org/abs/2006.12031 * https://ittayeyal.github.io/2020-06-22-mad-htlc Essentially, we find that HTLC security relies on miners

Re: [bitcoin-dev] MAD-HTLC

2020-06-23 Thread ZmnSCPxj via bitcoin-dev
Good morning Itay, Ittay, and Matan, I believe an unstated assumption in Bitcoin is that miners are short-sighted. The reasoning for this assumption is: * Deployment of new mining hardware controlled by others may occur at any time you do not control. * Thus, any transactions you leave on the

Re: [bitcoin-dev] MAD-HTLC

2020-06-23 Thread Stanga via bitcoin-dev
Hi ZmnSCPxj, Thank you for taking the time to respond, these are very good points. Responses inline. On Tue, Jun 23, 2020 at 12:48 PM ZmnSCPxj wrote: > Good morning Itay, Ittay, and Matan, > > I believe an unstated assumption in Bitcoin is that miners are > short-sighted. > > The reasoning for

Re: [bitcoin-dev] MAD-HTLC

2020-06-23 Thread Stanga via bitcoin-dev
Of course the order at the end should have been switched: Consider first the case where Alice *does not* publish preimage "A": Bob can safely publish preimage "B" and get both the Deposit and Collateral tokens after the timeout. Now, consider the case where Alice *publishes* preimage "A": If Bob p