Re: [bitcoin-dev] Sentinel Chains: A Novel Two-Way Peg

2023-08-30 Thread ZmnSCPxj via bitcoin-dev
Good morning Ryan, > I appreciate your questions, ZmnSCPxj. > > I will answer your second question first: Mainchain nodes do not ever > validate sidechain blocks. Sidechain nodes watch Bitcoin for invalid > withdrawals, and publish signed attestations to a public broadcast network > (such a

Re: [bitcoin-dev] Private Collaborative Custody with FROST

2023-08-30 Thread Nick Farrow via bitcoin-dev
Hey Rijndael, Here are some rough ideas for a draft scheme that I think will help explain this better. We begin by taking a single public nonce `D` from the collaborative signing server to form a nonce pair for FROST `(D, 0)`. This is then used to build the aggregate FROST nonce `R` which the si

Re: [bitcoin-dev] Blinded 2-party Musig2

2023-08-30 Thread Tom Trevethan via bitcoin-dev
An update on progress on the development of the blinded two-party Schnorr scheme for statechains. As stated previously, we believe that one-more-signature and Wagner attacks are mitigated by the client committing the values of the blinding nonce used (labeled f) and the value of R2 used in a signi

[bitcoin-dev] Announcing B'SST: Bitcoin-like Script Symbolic Tracer

2023-08-30 Thread Dmitry Petukhov via bitcoin-dev
Hello list, I have released B'SST: Bitcoin-like Script Symbolic Tracer It can be found at https://github.com/dgpv/bsst B'SST analyses Bitcoin and Elements scripts by symbolically executing all possible execution paths, and tracking constraints that opcodes impose on values they operate on. It th

Re: [bitcoin-dev] Sentinel Chains: A Novel Two-Way Peg

2023-08-30 Thread ZmnSCPxj via bitcoin-dev
Good morning Ryan, et al., My long-ago interest in sidechains was the hope that they would be a scaling solution. However, at some point I thought "the problem is that blockchains cannot scale, sidechains means MORE blockchains that cannot scale, what was I thinking???" This is why I turned my