Re: [bitcoin-dev] Codex32

2023-02-23 Thread Russell O'Connor via bitcoin-dev
One more thing (Again apologies. This idea of doing partial verification is novel to me, and I see now that I should have just waited to give a consolidated reply). Focusing in on the example of performing 2 character quick checks. There are 7 different ways of building the table used in this

Re: [bitcoin-dev] Codex32

2023-02-23 Thread Russell O'Connor via bitcoin-dev
Sorry for the repeated replies, but I would like to make one more remark regarding the 1 character "quick check". Because the 1 character "quick check" state is so small, the procedure becomes simplified to just using a single table. You start with the specified initial state, which would be the

Re: [bitcoin-dev] Codex32

2023-02-22 Thread Russell O'Connor via bitcoin-dev
After some consultation, I now see that generators for all degree 2 BCH codes, such as ours, are smooth and factor into quadratic and linear components. Anyhow the upshot of all this is that you can perform a "quickcheck" verification of the codex32 strings for whatever size of verification you

Re: [bitcoin-dev] Codex32

2023-02-22 Thread Russell O'Connor via bitcoin-dev
After some poking around at the math, I do see that the 13 character generator (for regular sized shares) is reasonably "smooth", having roots at T{11}, S{16}, and C{24}. This means we could build a "quick check" worksheet to evaluate the string modulo (x - T) to verify a 5 bit checksum, whose

Re: [bitcoin-dev] Codex32

2023-02-22 Thread Russell O'Connor via bitcoin-dev
On Sun, Feb 19, 2023 at 3:13 PM David A. Harding via bitcoin-dev < bitcoin-dev@lists.linuxfoundation.org> wrote: >Codex32 allows the individual to periodically perform their >recollection on paper in a private room without electronics and use >nothing but a pen and some loookup tables

Re: [bitcoin-dev] Codex32

2023-02-22 Thread Peter Todd via bitcoin-dev
On Sun, Feb 19, 2023 at 10:12:51PM +, Andrew Poelstra via bitcoin-dev wrote: > > What really did catch my attention, but which was kind of buried in the > > project documentation, is the ability to verify the integrity of each > > share independently without using a computer. For example, if

Re: [bitcoin-dev] Codex32

2023-02-20 Thread Pavol Rusnak via bitcoin-dev
Thanks Andrew! New draft makes it much more obvious what are the differences between Codex32 and SLIP-0039 scheme. -- Best Regards / S pozdravom, Pavol "Stick" Rusnak Co-Founder, SatoshiLabs ___ bitcoin-dev mailing list

Re: [bitcoin-dev] Codex32

2023-02-20 Thread Andrew Poelstra via bitcoin-dev
On Wed, Feb 15, 2023 at 09:16:02PM -0500, Russell O'Connor via bitcoin-dev wrote: > I've been asked by Dr. Curr and Professor Snead to forward this message to > this mailing list, as it may be of general interest to Bitcoin users. > > > I have opened a PR to the BIPs repo for this scheme:

Re: [bitcoin-dev] Codex32

2023-02-19 Thread Russell O'Connor via bitcoin-dev
On Sun, Feb 19, 2023 at 5:13 PM Andrew Poelstra via bitcoin-dev < bitcoin-dev@lists.linuxfoundation.org> wrote: > On Sun, Feb 19, 2023 at 10:13:33AM -1000, David A. Harding wrote: > > I'm curious about whether there's a way to prevent this attack without > > otherwise compromising the properties

Re: [bitcoin-dev] Codex32

2023-02-19 Thread Christopher Allen via bitcoin-dev
An easy but possibly very important tip: If you use only UPPER CASE alpha and numbers in codex32, and avoid most punctuation, it makes QR rendering of it significantly smaller. This is because the QR code to the ISO SPEC, when seeing lowercase, assumes the value is binary, then converts it to a

Re: [bitcoin-dev] Codex32

2023-02-19 Thread Andrew Poelstra via bitcoin-dev
On Sun, Feb 19, 2023 at 10:13:33AM -1000, David A. Harding wrote: > On 2023-02-16 03:49, Andrew Poelstra via bitcoin-dev wrote: > > the draft lists several benefits over SLIP-0039. > > The only benefit over SLIP39 that I see explicitly mentioned in the > draft BIP is "simple enough for hand

Re: [bitcoin-dev] Codex32

2023-02-19 Thread David A. Harding via bitcoin-dev
On 2023-02-16 03:49, Andrew Poelstra via bitcoin-dev wrote: the draft lists several benefits over SLIP-0039. The only benefit over SLIP39 that I see explicitly mentioned in the draft BIP is "simple enough for hand computation". In the FAQ[1] on the project's website, I see some additional

Re: [bitcoin-dev] Codex32

2023-02-16 Thread Andrew Poelstra via bitcoin-dev
On Thu, Feb 16, 2023 at 12:50:12PM +0100, Pavol Rusnak via bitcoin-dev wrote: > Hi! > > The BIP states that its only advantage over SLIP-0039, which has been used > in production for nearly three years (in at at least 3 SW/HW wallet > implementations), is that it aims to be simple enough for hand

Re: [bitcoin-dev] Codex32

2023-02-16 Thread Pavol Rusnak via bitcoin-dev
Hi! The BIP states that its only advantage over SLIP-0039, which has been used in production for nearly three years (in at at least 3 SW/HW wallet implementations), is that it aims to be simple enough for hand computation. However, the BIP also indicates that "details of hand computation are