Received: from sog-mx-1.v43.ch3.sourceforge.com ([172.29.43.191] helo=mx.sourceforge.net) by sfs-ml-4.v29.ch3.sourceforge.com with esmtp (Exim 4.76) (envelope-from ) id 1W5O7K-0002Va-6D for bitcoin-development@lists.sourceforge.net; Mon, 20 Jan 2014 23:18:54 +0000 X-ACL-Warn: Received: from mail-vc0-f173.google.com ([209.85.220.173]) by sog-mx-1.v43.ch3.sourceforge.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.76) id 1W5O7I-0000YT-Lq for bitcoin-development@lists.sourceforge.net; Mon, 20 Jan 2014 23:18:54 +0000 Received: by mail-vc0-f173.google.com with SMTP id ld13so3087906vcb.4 for ; Mon, 20 Jan 2014 15:18:47 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc:content-type; bh=fiUVB4qy99xSoT2Xk2Y07E6tzcRlqR54rx8+jF+BvrQ=; b=O/zNkdApauuz5byJ3z/0Z5lTd0J2L/eCtZag/MHmIZ9EJ4mmAvPfQOcNo10LdJaeCn rrxDEFazzj+T5CC3ZCuE8nrwWCHBncWAjQbdoZyu95QiY7tEzeDqbq+yftGaUfArDB2f mF8PrO0RJ3+XoBH996wz0m9Id7Gc4+Fh3t6W4hbAKE9GJPjeNcp+XFdU4xETuGLLmUje 51TB+go8/JSNAU/lAh9QsEPIPDNITfpaaByHo98H1h0NCKrZqn8PmMuX5onpcQ3Oevce Se0c3DOZpJOB2TySTst9mbb+Mpg0IxFLmkoCq6aaB9DD3Zrhjt32MORzuyTiRGLC6Yd6 xVNA== X-Gm-Message-State: ALoCoQm8IC/XjTSD8Ne7oCFyCFti5So+aoL3MPcaK6ZE5TfKVklxU4bMvmiwf+cmM8KDzy7tybrv X-Received: by 10.58.181.71 with SMTP id du7mr63145vec.25.1390259927119; Mon, 20 Jan 2014 15:18:47 -0800 (PST) MIME-Version: 1.0 Sender: marek@palatinus.cz Received: by 10.58.57.234 with HTTP; Mon, 20 Jan 2014 15:18:16 -0800 (PST) In-Reply-To: References: <20140120223502.GA1055@petertodd.org> From: slush Date: Tue, 21 Jan 2014 00:18:16 +0100 X-Google-Sender-Auth: DfbM0TcNdPi6-9VUq_Fqa0wRtsg Message-ID: To: Christophe Biocca Content-Type: multipart/alternative; boundary=047d7b8738101a0d1204f06f1d48 X-Spam-Score: 1.0 (+) X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (slush[at]centrum.cz) 1.0 HTML_MESSAGE BODY: HTML included in message X-Headers-End: 1W5O7I-0000YT-Lq Cc: "bitcoin-development@lists.sourceforge.net" Subject: Re: [Bitcoin-development] BIP0039: Final call X-BeenThere: bitcoin-development@lists.sourceforge.net X-Mailman-Version: 2.1.9 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jan 2014 23:18:54 -0000 --047d7b8738101a0d1204f06f1d48 Content-Type: text/plain; charset=ISO-8859-1 On Tue, Jan 21, 2014 at 12:06 AM, Christophe Biocca < christophe.biocca@gmail.com> wrote: > I remember the wordlist choice getting bikeshedded to death a month ago. > > I would just include the wordlist as part of the standard (as a > recommendation) so that fully compliant implementations can correct a > user's typos regardless of the original generator. > > That's exactly our attitude. We realized that have a community-wide agreement on the wordlist itself is simply imposible, so to reach at least some consensus we split the proposal to two parts - one what is essential to call itself a "bip39 compatible", i.e. converting the mnemonic to bip32 node and second which is optional, including our proposed wordlist, which has some advanced features like checksums etc. Now it is up to client developers to decide if they really insist on their superior wordlist or if they'll implement checksums following the full specification. > Those who don't like it will have to deal with the compatibility > concerns themselves, or get an alternate wordlist approved as a BIP. Odds are no one will go that route. > > At least Trezor and bitcoinj (Multibit) seems to be going in this way, which is 100% of clients which expressed interest in bip39 :-). slush > On Mon, Jan 20, 2014 at 5:35 PM, Peter Todd wrote: > > On Mon, Jan 20, 2014 at 04:05:14PM -0600, Brooks Boyd wrote: > >> On Mon, Jan 20, 2014 at 11:42 AM, slush wrote: > >> > >> > Hi all, > >> > > >> > during recent months we've reconsidered all comments which we received > >> > from the community about our BIP39 proposal and we tried to meet all > >> > requirements for such standard. Specifically the proposal now doesn't > >> > require any specific wordlist, so every client can use its very own > list of > >> > preferred words. Generated mnemonic can be then applied to any other > >> > BIP39-compatible client. Please follow current draft at > >> > https://github.com/trezor/bips/blob/master/bip-0039.mediawiki. > >> > >> So, because the [mnemonic]->[bip32 root] is just hashing, you've > >> effectively made your "mnemonic sentence" into a brainwallet? Since > every > >> mnemonic sentence can now lead to a bip32 root, and only the client that > >> created the mnemonic can verify the mnemonic passes its checksum > (assuming > >> all clients use different wordlists, the only client that can help you > if > >> you fat-finger the sentence is the client that created it)? > > > > That issue is more than enough to get a NACK from me on making the > > current BIP39 draft a standard - I can easily see that leading to users > > losing a lot of money. > > > > Have any wallets implemented BIP39 this way already in released code? > > > > -- > > 'peter'[:-1]@petertodd.org > > 00000000000000009c3092c0b245722363df8b29cfbb86368f4f7303e655983a > > > > > ------------------------------------------------------------------------------ > > CenturyLink Cloud: The Leader in Enterprise Cloud Services. > > Learn Why More Businesses Are Choosing CenturyLink Cloud For > > Critical Workloads, Development Environments & Everything In Between. > > Get a Quote or Start a Free Trial Today. > > > http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk > > _______________________________________________ > > Bitcoin-development mailing list > > Bitcoin-development@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/bitcoin-development > > > > > ------------------------------------------------------------------------------ > CenturyLink Cloud: The Leader in Enterprise Cloud Services. > Learn Why More Businesses Are Choosing CenturyLink Cloud For > Critical Workloads, Development Environments & Everything In Between. > Get a Quote or Start a Free Trial Today. > > http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk > _______________________________________________ > Bitcoin-development mailing list > Bitcoin-development@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/bitcoin-development > --047d7b8738101a0d1204f06f1d48 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable

= On Tue, Jan 21, 2014 at 12:06 AM, Christophe Biocca <<= a href=3D"mailto:christophe.biocca@gmail.com" target=3D"_blank">christophe.= biocca@gmail.com> wrote:
I remember the wordlist choice getting bikeshedded to deat= h a month ago.

I would just include the wordlist as part of the standard (as a
recommendation) so that fully compliant implementations can correct a
user's typos regardless of the original generator.


That's exactly our attitude. We re= alized that have a community-wide agreement on the wordlist itself is simpl= y imposible, so to reach at least some consensus we split the proposal to t= wo parts - one what is essential to call itself a "bip39 compatible&qu= ot;, i.e. converting the mnemonic to bip32 node and second which is optiona= l, including our proposed wordlist, which has some advanced features like c= hecksums etc. Now it is up to client developers to decide if they really in= sist on their superior wordlist or if they'll implement checksums follo= wing the full specification.

=A0
Those who don't like it will have to deal with the compatibility
concerns themselves, or get an alternate wordlist approved as a BIP.=A0
Odds are no one will go that route.

=A0
At least Trezor and bitcoinj (Multibit)= seems to be going in this way, which is 100% of clients which expressed in= terest in bip39 :-).

slush
=A0
On Mon, Jan 20, 2014 at 5:35 PM, Peter Todd <pete@petertodd.org> wrote:
> On Mon, Jan 20, 2014 at 04:05:14PM -0600, Brooks Boy= d wrote:
>> On Mon, Jan 20, 2014 at 11:42 AM, slush <slush@centrum.cz> wrote:
>>
>> > Hi all,
>> >
>> > during recent months we've reconsidered all comments whic= h we received
>> > from the community about our BIP39 proposal and we tried to m= eet all
>> > requirements for such standard. Specifically the proposal now= doesn't
>> > require any specific wordlist, so every client can use its ve= ry own list of
>> > preferred words. Generated mnemonic can be then applied to an= y other
>> > BIP39-compatible client. Please follow current draft at
>> > https://github.com/trezor/bips/blob/master/b= ip-0039.mediawiki.
>>
>> So, because the [mnemonic]->[bip32 root] is just hashing,= you've
>> effectively made your "mnemonic sentence" into a brainwa= llet? Since every
>> mnemonic sentence can now lead to a bip32 root, and only the clien= t that
>> created the mnemonic can verify the mnemonic passes its checksum (= assuming
>> all clients use different wordlists, the only client that can help= you if
>> you fat-finger the sentence is the client that created it)?
>
> That issue is more than enough to get a NACK from me on making the
> current BIP39 draft a standard - I can easily see that leading to user= s
> losing a lot of money.
>
> Have any wallets implemented BIP39 this way already in released code?<= br> >
> --
> 'peter'[:-1]@petertodd.org
> 00000000000000009c3092c0b245722363df8b29cfbb86368f4f7303e655983a
>
> ----------------------------------------------------------------------= --------
> CenturyLink Cloud: The Leader in Enterprise Cloud Services.
> Learn Why More Businesses Are Choosing CenturyLink Cloud For
> Critical Workloads, Development Environments & Everything In Betwe= en.
> Get a Quote or Start a Free Trial Today.
> http://pubads.g.doubleclick.ne= t/gampad/clk?id=3D119420431&iu=3D/4140/ostg.clktrk
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-d= evelopment@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitco= in-development
>

---------------------------------------------------------------------------= ---
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between. Get a Quote or Start a Free Trial Today.
http://pubads.g.doubleclick.net/gam= pad/clk?id=3D119420431&iu=3D/4140/ostg.clktrk
_______________________________________________
Bitcoin-development mailing list
Bitcoin-develo= pment@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bitcoin-de= velopment

--047d7b8738101a0d1204f06f1d48--