Re: [bitcoin-dev] Taproot proposal

2019-05-18 Thread ZmnSCPxj via bitcoin-dev
Good morning list, > > Can this "unknown discrete logarithm" be made provably unknown, so all > > signers are assured of this property? Bonus points if the outside world > > can't tell. The exact mechanism could be outside the scope of the BIP, but > > knowing that it's possible is useful. > >

[bitcoin-dev] Code not following proof of security

2019-05-18 Thread Zawy via bitcoin-dev
If MAX_FUTURE_BLOCK_TIME in chain.h is set smaller than DEFAULT_MAX_TIME_ADJUSTMENT in timedata.h, the POW security can be undermined by a 33% Sybil attack on the nodes. Blocks with accurate timestamps would be rejected which allows various attacks. Code should reflect a proof of security, so it sh