Date: Tue, 21 Jun 2016 18:42:25 -0400
From: Peter Todd <pete@petertodd.org>
To: "zaki@manian.org" <zaki@manian.org>,
	Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Message-ID: <20160621224225.GA10422@fedora-21-dvm>
References: <20160620085649.GA29964@fedora-21-dvm> <5767EEFE.7060103@dyne.org>
	<CAJQ8TmBw3PdCYv=fsyiXMTNO_sHZEj__n0Rsra6id+ORxQworA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="17pEHd4RhPHOinZp"
Content-Disposition: inline
In-Reply-To: <CAJQ8TmBw3PdCYv=fsyiXMTNO_sHZEj__n0Rsra6id+ORxQworA@mail.gmail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)
Subject: Re: [bitcoin-dev] Building Blocks of the State Machine Approach to
 Consensus
Precedence: list


--17pEHd4RhPHOinZp
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Jun 20, 2016 at 04:21:39PM +0000, zaki--- via bitcoin-dev wrote:
> Hi Peter,
>=20
> I didn't entirely understand the process of transaction linearization.
>=20
> What I see is a potential process where when the miner assembles the bloc=
k,
> he strips all but one sigscript per tx. The selection of which  sigscript
> is retained is determined by the random oracle.  Is this is primary benef=
it
> you are suggesting?
>=20
> It appears to me that blocks still need to contain a list of full TX Input
> and Tx Outputs with your approach. Some of the description seems to
> indicate that there are opportunities to elide further data but it's
> unclear to me how.

I think you've misunderstood what I'm proposing. The state machine approach=
 I
described doesn't necessarily require blocks or even miners to exist at all.
Rather, it assumes that a single-use seal primitive is available, and a ran=
dom
beacon primitive for tx linearization, and then builds a system on top of t=
hose
primitives. Transaction data - the proofs that certain states have been rea=
ched
in the system - does not need to be broadcast publicly; if Alice wants to
convince Bob that she has given him money, the only person who needs that
transaction (and transactions prior to it in the tx history) is Bob.

So as to your question about miners assembling blocks, and what blocks cont=
ain:
there doesn't need to be blocks at all! Transaction history linearization is
something your wallet would do for you.

--=20
https://petertodd.org 'peter'[:-1]@petertodd.org

--17pEHd4RhPHOinZp
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJXacLNAAoJEGOZARBE6K+yw1MH/1FS1UBuVoh3ngSUHS8ydXJO
WREqKpfuhxv7enolSIgzp7wcxySKjM5wk2I7bumZu9dQXpcFM7krf+rWnMCWGO8M
QRS+th9diOVO2vHQs1XoOdwhOo/ZUqXxikwBCy9sW5pXKR+NBhP6KKPDi3Bfdfoa
wp7153JKvGhvwnAf+NuyYPMZlt7s9pfPGf5ROXn0oiTZk4dd33I+PRncXnHKGSu1
XaSN9SOq9yQZlIorTIJ+InGT5jVkH9CllWT+MmvyD90s4rPUKi6Ym8AtztNccvB1
znLOyEcnIKos544O7vPD1GEwKyoqKbD3dp+EZUA/QctqsPuGiJBfvd06jcax6VY=
=qOXD
-----END PGP SIGNATURE-----

--17pEHd4RhPHOinZp--