In light of my ongoing discussions with various people in the space, and the recent discovery of how to do hash preimages [1], it's become clear that the "excess value" is badly misnamed.
What the excess value really describes is the net change in the UTXO set; it's also a multisignature key of all participants in the transaction, and anything it signs is an assertion that (a) the transaction executed as desired, (b) the partipants agreed to sign whatever else alongside the transaction. The original characterization of the excess signature as being a "proof of knowledge of discrete logarithm" that asserts no net inflation is really understating its purpose. In fact, the excess is the only part of a transaction that needs to remain in the blockchain forever, and its presence is what proves that a transaction was executed faithfully in that block. In a sense the actual inputs and outputs are simply witnesses to this fact. (And the UTXO set itself is only needed to ensure consensus on exact UTXOs; the excess values tell us the set up to splitting/merging. Like Robert Pirsig in Zen and the Art of Motorcycle Maintenance downplaying Plato's ``carving reality at its joints'' as ultimately arbitrary, so I claim that individual outputs merely carve coins whose ownership is already defined by the construction of the excess values, and we only need this exact carving so that we can understand each other, i.e. to avoid consensus failures.) I'm giving a talk at the Stanford Blockchain Conference in a few days and I want to emphasize this change of philosophy, and also ward off future confusion. I therefore propose renaming "excess value" everywhere to "kernel" or "transaction kernel". Does anyone have any thoughts or comments on this? [1] https://lists.launchpad.net/mimblewimble/msg00022.html -- Andrew Poelstra Mathematics Department, Blockstream Email: apoelstra at wpsoftware.net Web: https://www.wpsoftware.net/andrew "A goose alone, I suppose, can know the loneliness of geese who can never find their peace, whether north or south or west or east" --Joanna Newsom
signature.asc
Description: PGP signature
-- Mailing list: https://launchpad.net/~mimblewimble Post to : mimblewimble@lists.launchpad.net Unsubscribe : https://launchpad.net/~mimblewimble More help : https://help.launchpad.net/ListHelp
