+Return-Path: <belcher@riseup.net>

+Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org

+ [172.17.192.35])

+ by mail.linuxfoundation.org (Postfix) with ESMTPS id 57880D95

+ for <bitcoin-dev@lists.linuxfoundation.org>;

+ Wed, 7 Aug 2019 09:38:50 +0000 (UTC)

+X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6

+Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129])

+ by smtp1.linuxfoundation.org (Postfix) with ESMTPS id D21C27D2

+ for <bitcoin-dev@lists.linuxfoundation.org>;

+ Wed, 7 Aug 2019 09:38:49 +0000 (UTC)

+Received: from capuchin.riseup.net (capuchin-pn.riseup.net [10.0.1.176])

+ (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))

+ (Client CN "*.riseup.net",

+ Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK))

+ by mx1.riseup.net (Postfix) with ESMTPS id 6AD8A1A071A;

+ Wed, 7 Aug 2019 02:38:49 -0700 (PDT)

+DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;

+ t=1565170729; bh=u+W0SAKoJ2SoKgdtmm3lYOcHTmTW6of7xkWOO1pOrkg=;

+ h=Subject:To:References:From:Date:In-Reply-To:From;

+ b=hcjS3HkPy/oSzmnLdpL1SnFgHQkYPLk/Tpv/2cdI1hHcTnypk9nNk26QbNDHqU34x

+ a2CowQ5VV4oKozjzP+bod/Dqjc+ByKmEXPmpsNtZ6I6rCjkBBWvKN/anGgux6c2Wvg

+ a+LJf0IB81AoTF3BM6pfDOQ6UCo0r8wlthw/sTwc=

+X-Riseup-User-ID: A542FD0DA52A6A5D1FF20D933A1D3AAA6435EC803C43EAB0F99ECBA109E58E3B

+Received: from [127.0.0.1] (localhost [127.0.0.1])

+ by capuchin.riseup.net (Postfix) with ESMTPSA id 6087B1207FC;

+ Wed, 7 Aug 2019 02:38:47 -0700 (PDT)

+To: ZmnSCPxj <ZmnSCPxj@protonmail.com>, Dmitry Petukhov <dp@simplexum.com>,

+ Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>

+References: <985792b1-e7aa-677b-a7a1-6a5f672da884@riseup.net>

+ <94534006-D560-4C90-9D5D-A3A64B698518@gmail.com>

+ <20190726143738.0be561da@simplexum.com>

+ <3c328312-2bdd-60d9-7425-8db620d09abb@riseup.net>

+ <20190731205018.10ed4302@simplexum.com>

+ <ae32dcbb-c950-3b3f-22b9-d152d6b221cb@riseup.net>

+ <20190802145057.7b81c597@simplexum.com>

+ <ad501873-8912-765e-8df5-c9b0451fcd0a@riseup.net>

+ <20190807015541.3d8aa849@simplexum.com>

+ <20190807023742.73750ba3@simplexum.com>

+ <j-MXLs8fEpx57ttA_3TbcaWXT_eGjpcFkFE-Yzy3aPrUhSmnSSwHS1zIuez4aoBp8VrIsGHL8sAWYc_vR_T6QgQXM4xCDrVVlv0uW9MIs5s=@protonmail.com>

+From: Chris Belcher <belcher@riseup.net>

+Openpgp: preference=signencrypt

+Autocrypt: addr=belcher@riseup.net; prefer-encrypt=mutual; keydata=

+ mQINBFPk74oBEACzBLjd+Z5z7eimqPuObFTaJCTXP7fgZjgVwt+q94VQ2wM0ctk/Ft9w2A92

+ f14T7PiHaVDjHxrcW+6sw2VI2f60T8Tjf+b4701hIybluWL8DntG9BW19bZLmjAj7zkgektl

+ YNDUrlYcQq2OEHm/MGk6Ajt2RA56aRKqoz22e+4ZA89gDgamxUAadul7AETSsgqOEUDI0FKR

+ FODzoH65w1ien/DLkG1f76jd0XA6AxrESJVO0JzvkTnJGElBcA37rYaMmDi4DhG2MY4u63VE

+ 8h6DyUXcRhmTZIAj+r+Ht+KMDiuiyQcKywCzzF/7Ui7YxqeAgjm5aPDU2E8X9Qd7cqHQzFM7

+ ZCqc9P6ENAk5a0JjHw0d0knApboSvkIJUB0j1xDIS0HaRlfHM4TPdOoDgnaXb7BvDfE+0zSz

+ WkvAns9oJV6uWdnz5kllVCjgB/FXO4plyFCHhXikXjm1XuQyL8xV88OqgDFXwVhKrDL9Pknu

+ sTchYm3BS2b5Xq1HQqToT3I2gRGTtDzZVZV0izCefJaDp1mf49k2cokDEfw9MroEj4A0Wfht

+ 0J64pzlBYn/9zor5cZp/EAblLRDK6HKhSZArIiDR1RC7a6s7oTzmfn0suhKDdTzkbTAnDsPi

+ Dokl58xoxz+JdYKjzVh98lpcvMPlbZ+LwIsgbdH4KZj7mVOsJwARAQABtB9DaHJpcyBCZWxj

+ aGVyIDxmYWxzZUBlbWFpbC5jb20+iQI+BBMBAgAoBQJT5O+KAhsDBQkSzAMABgsJCAcDAgYV

+ CAIJCgsEFgIDAQIeAQIXgAAKCRDvc06md/MRKS8jD/9P9fSYSIVjltL9brAMfIu7wJn0H0lX

+ TbcuCM2uQitJ3BNxI3c7aq5dEby27u5Ud54otncDJuRPQVDKs6H7t1rInitgJ1MTQ9/aQGFA

+ btKcgtVIMFbeClzTTfWr4W7fE45NI7E9EANgk5JfmWh3U+KINYLF5RtqynYocrsP6zOV+G9A

+ HCpBemd9TN60CoMLMyMzTHEW1oQffaVAXY8DgthEYO/odWYIod7VTmEm0zU1aSysPqMwPWNm

+ 8XIl0f8SfKQyZlAU8e1eCFVCenkE44FKC5qQNYc2UxexEYtfCWChTGc4oHKxIyYmTCCefsQF

+ LvgwtvlNHRXHSDKSPSNcRcpl8DFpNEKrmMlkJ8Mx+YR05CydlTQ0bI3FBohJC+UHrjD5I3hA

+ wJUC1o+yVSOEd+zN3cG1EECIwkEQSmBgG5t/le2RdzfXOdpf9ku2/zoBpq00R54JxUKlfRM7

+ OPTv7X+1AKHkxOySdCZwGgvdh2Whuqs4kTvtco00gCFM9fBd5oi1RJuHtxHsj8+/XU15UItb

+ jeo96CIlM5YUeoRLPT5mxZYWgYAARFeSFReNq/Tuwq9d8EokUrtAyrPayznliy53UJfWDVzl

+ 925c0Cz0HWaP2fWj+uFcj/8K0bhptuWJQy0Poht1z3aJC1UjEgr1Xz8I7jeSJmIlA9plcJw2

+ k4dhWbkCDQRT5O+KARAAyFxAM28EQwLctr0CrQhYWZfMKzAhCw+EyrUJ+/e4uiAQ4OyXifRr

+ ZV6kLRul3WbTB1kpA6wgCShO0N3vw8fFG2Cs6QphVagEH8yfQUroaVxgADYOTLHMOb7INS8r

+ KI/uRNmE6bXTX27oaqCEXLMycqYlufad7hr42S/T8zNh5m2vl6T/1Poj2/ormViKwAxM+8qf

+ xd8FNI4UKmq2zZE9mZ5PiSIX0qRgM0yCvxV39ex/nhxzouTBvv4Lb1ntplR/bMLrHxsCzhyM

+ KDgcX7ApGm+y6YEsOvzw9rRCRuJpE4lth8ShgjTtNTHfklBD6Ztymc7q7bdPWpKOEvO5lDQ6

+ q8+KfENv862cOLlWLk7YR2+mHZ1PXGhWC7ggwEkfGJoXo0x8X+zgUKe2+9Jj4yEhfL0IbFYC

+ z2J5d+cWVIBktI3xqkwLUZWuAbE3vgYA4h8ztR6l18NTPkiAvpNQEaL4ZRnAx22WdsQ8GlEW

+ dyKZBWbLUdNcMmPfGi5FCw2nNvCyN6ktv5mTZE12EqgvpzYcuUGQPIMV9KTlSPum3NLDq8QI

+ 6grbG8iNNpEBxmCQOKz2/BuYApU2hwt2E44fL8e6CRK3ridcRdqpueg75my6KkOqm8nSiMEc

+ /pVIHwdJ9/quiuRaeC/tZWlYPIwDWgb8ZE/g66z35WAguMQ+EwfvgAUAEQEAAYkCJQQYAQIA

+ DwUCU+TvigIbDAUJEswDAAAKCRDvc06md/MRKaZwD/9OI3o3gVmst/mGx6hVQry++ht8dFWN

+ IiASPBvD3E5EWbqWi6mmqSIOS6CxjU0PncxTBPCXtzxo/WzuHGQg/xtNeQ0T8b2lBScZAw93

+ qm1IcHXLUe5w/Tap6YaDmSYCIZAdtbHzYfPW4JK7cmvcjvF8jhTFOBEOFVQkTi19G7caVot0

+ +wL1e2DRHDXAe5CinEpaLBlwHeEu/5j6wc3erohUZlK9IbAclj4iZTQbaq3EyqUXl59dBOON

+ xmL5edJxzVishIYQGIyA9WP1SylXt+kO82NEqZG2OxdXAlzjuJ8C2pAG+nbLtDo4hcsiN/MA

+ aX9/JB7MXclT5ioerF4yNgKEdfq7LmynsTUd8w/Ilyp7AD+BWoujyO94i8h9eKvjf9PvSwxQ

+ uAjRpxne7ZJD8vCsMNXBHSbeEK2LiwStHL/w473viXpDD53J6OLxX6a5RummR+rixbMH7dgK

+ MJQ7FlyDphm3or6CSkGEir1KA0y1vqQNFtHhguFapAWMDKaJjQQNgvZUmOo6hbZqmvUF1OWc

+ d6GA6j3WOUe3fDJXfbq6P9Jmxq64op887dYKsg7xjQq/7KM7wyRcqXXcbBdgvNtVDP+EnzBN

+ HyYY/3ms4YIHE5JHxQ9LV4yPcWkYTvb1XpNIFVbrSXAeyGHVNT+SO6olFovbWIC3Az9yesaM

+ 1aSoTg==

+Message-ID: <113a68d9-6c8c-3bf2-b337-9b87c5fd1db7@riseup.net>

+Date: Wed, 7 Aug 2019 10:38:43 +0100

+MIME-Version: 1.0

+In-Reply-To: <j-MXLs8fEpx57ttA_3TbcaWXT_eGjpcFkFE-Yzy3aPrUhSmnSSwHS1zIuez4aoBp8VrIsGHL8sAWYc_vR_T6QgQXM4xCDrVVlv0uW9MIs5s=@protonmail.com>

+Content-Type: text/plain; charset=utf-8

+Content-Language: en-US

+Content-Transfer-Encoding: 7bit

+X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,

+ DKIM_VALID, DKIM_VALID_AU, RCVD_IN_DNSWL_LOW autolearn=ham version=3.3.1

+X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on

+ smtp1.linux-foundation.org

+Subject: Re: [bitcoin-dev] Improving JoinMarket's resistance to sybil

+ attacks using fidelity bonds

+X-BeenThere: bitcoin-dev@lists.linuxfoundation.org

+X-Mailman-Version: 2.1.12

+Precedence: list

+List-Id: Bitcoin Protocol Discussion <bitcoin-dev.lists.linuxfoundation.org>

+List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/bitcoin-dev>,

+ <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=unsubscribe>

+List-Archive: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/>

+List-Post: <mailto:bitcoin-dev@lists.linuxfoundation.org>

+List-Help: <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=help>

+List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev>,

+ <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=subscribe>

+X-List-Received-Date: Wed, 07 Aug 2019 09:38:50 -0000

+

+On 07/08/2019 00:33, ZmnSCPxj wrote:

+> Good morning all,

+>

+> It might be useful to remember that there exists pressure to pool proof-of-work due to tiny non-linearities caused by Proximity Premium and Variance Discount flaws.

+> Similarly, any non-linearity in any fidelity bond scheme exerts the same pooling pressure.

+> Deliberately increasing the non-linearity to V^2 worsens the pooling pressure, not lessens it.

+>

+> (I wonder if instead going the opposite way and doing V^0.999 might work better; I have not figured all the implications of such a scheme and leave it to the reader.)

+>

+>> Unfortunately, both described schemes fail the same way as

+>> 'require TXOs to be consolidated by the owner', by the fact that with

+>> muSig, shared ownership of TXO is possible, as explained by ZmnSCPxj in

+>> [1]. 2P-ECDSA is also possible, just more complex, so just saying 'ban

+>> musig for the bonds' is not the answer, I believe.

+>

+> If my understanding is correct, efforts to expand ECDSA to more than two-party n-of-n "true" multisignatures already are ongoing.

+>

+> One might attempt to use transaction malleability as a protection, and require that transactions that put up bond TXOs should spend from at least one ***non***-SegWit output, so that the scheme as described fails (as the funding txid is malleable after-the-fact).

+>

+> But the scheme as described only considers ways to securely aggregate *within* the Bitcoin universe.

+>

+> I have recently learned of a spacce called the "real world", wherein apparently there exist things as "contract law".

+> It seems to me this "contract law" is a half-baked implementation of Bitcoin cryptographic smart contracts.

+> By what little I understand of this "contract law", it would be possible for an aggregator to accept some amount of money, with a promise to return that money in the future with some additional funds.

+> If the aggregator fails to uphold its promise, then some (admittedly centralized) authority entity within the "real world" then imposes punishments (apparently inspired by similar mechanisms in Lightning Network) on the aggregator.

+> Such arrangements (accepting some money now with a promise to return the money, plus some interest earned, in the future) apparently already exist in this "real world", under the name of "time deposits".

+>

+>

+> Regards,

+> ZmnSCPxj

+>

+

+Good morning all,

+

+Custodial solutions are much less worrying because they introduce so

+much counterparty risk.

+

+It's more risky to give bitcoins in custody than for fiat money because

+there's no lender of last resort. People using JoinMarket in a

+non-custodial way will always have a larger risk-adjusted return; The

+return for running a JoinMarket yield generator isn't that big anyway to

+start with. The non-custodial renting of TXO signatures is far more

+worrying.

+

+Also, as described in my other email

+(https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2019-August/017218.html

+starting "

+Let's say the sybil attacker...") the superlinear V^2 term is essential

+to the resistance of the fidelity bond system to sybil attacks. All

+things considered the consolidation of makers due to renting TXOs is not

+as bad as sybil attacks. Consolidation of makers means that the

+privacy-relevant information is shared amongst fewer people than

+otherwise, but at least those people are independent (otherwise they'd

+merge together). In a sybil attack the privacy-relevant information is

+not shared at all, but entirely known by just one person which is much

+worse.

+

+CB

+