Re: [bitcoin-dev] Multisignature for bip-schnorr

2018-09-12 Thread nakagat via bitcoin-dev
Hi Jonas Thank you for your comment. I wrote a new text. https://gist.github.com/tnakagawa/e6cec9a89f698997dc58a09db541e1eb If you have time, please review this. 2018年9月7日(金) 17:09 Jonas Nick : > > Your multisignature writeup appears to be vulnerable to key cancellation > attacks because the agg

Re: [bitcoin-dev] Multisignature for bip-schnorr

2018-09-07 Thread Jonas Nick via bitcoin-dev
Your multisignature writeup appears to be vulnerable to key cancellation attacks because the aggregated public key is just the sum of public keys (and there is no proof of knowledge of the individual secret keys). Therefore, in a multisignature between Alice and an attacker, the attacker can choose

Re: [bitcoin-dev] Multisignature for bip-schnorr

2018-08-31 Thread nakagat via bitcoin-dev
Hi all, I wrote t-of-k threshold signature procedure using bip-schnorr. If you have time to review and give feedback, I’d really appreciate it. Thanks in advance! Threshold Signatures https://gist.github.com/tnakagawa/e6cec9a89f698997dc58a09db541e1eb Original https://github.com/sipa/bips/blob/b

Re: [bitcoin-dev] Multisignature for bip-schnorr

2018-08-29 Thread Erik Aronesty via bitcoin-dev
It's cool but - there's a lot of online steps. - it's not a threshold system Using a shamir scheme solves this and isn't subject to birthday attacks: https://medium.com/@simulx/an-m-of-n-bitcoin-multisig-scheme-e7860ab34e7f On Mon, Aug 13, 2018 at 7:08 AM nakagat via bitcoin-dev < bitcoin-dev

[bitcoin-dev] Multisignature for bip-schnorr

2018-08-13 Thread nakagat via bitcoin-dev
Hi all, I wrote a multisignature procedure using bip-schnorr. If you have time to review and give feedback, I’d really appreciate it. Thanks in advance! Multisignature https://gist.github.com/tnakagawa/0c3bc74a9a44bd26af9b9248dfbe598b Original https://github.com/sipa/bips/blob/bip-schnorr/bip-s