On 12/12/17 21:05, Peter Todd wrote: > On Tue, Dec 12, 2017 at 06:47:38PM +0000, Daira Hopwood via zapps-wg wrote: >> On 04/12/17 21:19, Justin Drake via zapps-wg wrote: >>> Bounty >>> ====== >>> >>> I am offering 5 ETH (about 2,300 USD at the time of writing) to the first >>> person who can >>> recover the randomness for my part of the ceremony. The bounty is valid >>> until 31 December >>> 2023. >> >> I suspect that it may actually be possible to do this by breaking DLP (given >> the >> challenge and response files) before 2023. > > So to be clear, you think there's a reasonable chance that it becomes possible > to counterfeit Zcash before 2023?
Sorry, that'll teach me to write emails while jetlagged: I misread the date. I don't think it is at all likely that DLP on BLS12-381 can be feasibly broken by 2023. It will be breakable at some point, but not by then. -- Daira Hopwood ⚧Ⓐ
Description: OpenPGP digital signature