On Tue, Nov 08, 2022 at 03:34:32PM -0800, Bram Cohen via bitcoin-dev wrote: > Another probably unhelpful bit of feedback I have is that Bitcoin should > probably be taking verkle trees seriously because those can have > substantially lower size/cost/weight than merkle trees. That doesn't just > apply to this proposal, but to Bitcoin in general, which doesn't seem to > have any serious verkle tree proposals to date.
Verkle trees only reduce proof sizes by a factor of 6-8, and they introduce significant implementation complexity and new cryptographic assumptions. Better to let other crypto-systems get a few more years of experience with them before adding them to Bitcoin. Particularly since even having merkle trees in Bitcoin is arguably a mistake: they allow for degenerate, weak, security modes like SPV that aren't clearly good for Bitcoin as a whole. -- https://petertodd.org 'peter'[:-1]@petertodd.org
signature.asc
Description: PGP signature
_______________________________________________ bitcoin-dev mailing list bitcoin-dev@lists.linuxfoundation.org https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
