Re: [Lightning-dev] Trustless Watchtowers

2018-11-15 Thread ZmnSCPxj via Lightning-dev
Good morning Conner, > > > > > From my bare knowledge of go, it seems data structures and messages so > > > far, > > > without actual logic, but please inform me if I am incorrect. > > > > Much of the server side has been implemented, which accepts encrypted blobs > > from > > watchtower clien

Re: [Lightning-dev] Trustless Watchtowers

2018-11-13 Thread Conner Fromknecht
Quick correction: > Thus, the cost to perform the attack would be many orders of > magnitude greater than the cost to back up one channel. This was written assuming the attacker was trying to upload multiple encrypted blobs for the same txid, which seems like an unlikely attack vector if the towe

Re: [Lightning-dev] Trustless Watchtowers

2018-11-13 Thread Conner Fromknecht
Hi ZmnSCPxj, I haven't yet gotten around to writing up everything documenting in the working watchtower design. However, I think we are nearing that phase where things seem mostly solidified and would welcome feedback before attempting to formalize it. Expect some follow up posts on the ML :) > F

[Lightning-dev] Trustless Watchtowers

2018-11-12 Thread ZmnSCPxj via Lightning-dev
Good morning list, We were not able to discuss this topic much at recent summit, but I noticed that lnd has some code related to watchtowers already. From my bare knowledge of go, it seems data structures and messages so far, without actual logic, but please inform me if I am incorrect. I ass

Re: [Lightning-dev] Trustless WatchTowers?

2018-04-18 Thread ZmnSCPxj via Lightning-dev
Good morning list, A possible problem with the encrypted blob approach came to my mind. A potential thief, knows the commitment transaction it will attempt to use to steal (obviously). That potential thief, also knows the commitment transaction ID (obviously). In the encrypted blob approach, t

Re: [Lightning-dev] Trustless WatchTowers?

2018-04-17 Thread ZmnSCPxj via Lightning-dev
Good morning Conner, I have an insane idea. > One minimal solution could be to send signatures for independent sweep > transactions, allowing the watchtower to sweep each HTLC output individually. > This is nice because it permits the watchtower to sweep exactly the subset > ofHTLCs that ever tr

Re: [Lightning-dev] Trustless WatchTowers?

2018-04-17 Thread Conner Fromknecht
The ability for a watchtower to spend them independently seems to resolve this* On Tue, Apr 17, 2018 at 01:30 Conner Fromknecht wrote: > Hi ZmnSCPxj, > > > > I understand. For myself, I will also wait for comment from other > c-lightning > > developers: this seems to require a bit of surgery on

Re: [Lightning-dev] Trustless WatchTowers?

2018-04-17 Thread Conner Fromknecht
Hi ZmnSCPxj, > I understand. For myself, I will also wait for comment from other c-lightning > developers: this seems to require a bit of surgery on our code I think > (currently construction of justice transactions is done in a separate process, > and we always generate a justice transaction tha

Re: [Lightning-dev] Trustless WatchTowers?

2018-04-17 Thread ZmnSCPxj via Lightning-dev
Good morning Conner, >> I understand. It would be good to know what you have, and perhaps consider >> planning a new BOLT document for such. > Yes, that is the ultimate goal. I think it might be a little to soon to have a > full-on BOLT spec. There are still some implementation details that we wou

Re: [Lightning-dev] Trustless WatchTowers?

2018-04-17 Thread Conner Fromknecht
Good evening ZmnSCPxj, > Also, thank you for the link. Definitely! I had to do some digging myself to recover these hidden gems. > I understand. It would be good to know what you have, and perhaps consider > planning a new BOLT document for such. Yes, that is the ultimate goal. I think it might

Re: [Lightning-dev] Trustless WatchTowers?

2018-04-16 Thread ZmnSCPxj via Lightning-dev
Good morning Conner, > Hi ZmnSCPxj, > >> Can you describe the "encrypted blob" approach to me? Or point me to >> materials? > > There's an awesome watchtower thread on the mailing list from 2016 that starts > here [1]. It covers a broader range of possibilities than just the encrypted > blob appro

Re: [Lightning-dev] Trustless WatchTowers?

2018-04-16 Thread Conner Fromknecht
Hi ZmnSCPxj, > Can you describe the "encrypted blob" approach to me? Or point me to > materials? There's an awesome watchtower thread on the mailing list from 2016 that starts here [1]. It covers a broader range of possibilities than just the encrypted blob approach, and also considers other revo

Re: [Lightning-dev] Trustless WatchTowers?

2018-04-16 Thread ZmnSCPxj via Lightning-dev
Good morning Laolu, > Hi ZmnSCPxj, > >> It seems to me, that the only safe way to implement a trustless WatchTower, >> is for the node to generate a fully-signed justice transaction, IMMEDIATELY >> after every commitment transaction is revoked, and transmit it to the >> WatchTower. > > No, one doe

Re: [Lightning-dev] Trustless WatchTowers?

2018-04-16 Thread Olaoluwa Osuntokun
Hi ZmnSCPxj, > It seems to me, that the only safe way to implement a trustless WatchTower, > is for the node to generate a fully-signed justice transaction, IMMEDIATELY > after every commitment transaction is revoked, and transmit it to the > WatchTower. No, one doesn't need to transmit the entir

[Lightning-dev] Trustless WatchTowers?

2018-04-15 Thread ZmnSCPxj via Lightning-dev
Hi all, Nicolas Dorier was requesting additional hooks in c-lightning for a simple WatchTower system: https://github.com/ElementsProject/lightning/issues/1353 Unfortunately I was only able to provide an interface which requires a *trusted* WatchTower. Trust is of course a five-letter word and