MIME-Version: 1.0
From: Sean Bowe <sean@z.cash>
Date: Tue, 19 Jul 2016 22:35:39 -0600
Message-ID: <CAKazn3mKUMMz0wyqTsgbkd4mBLgvG2PXziXhgRTi4hX_ApbPhg@mail.gmail.com>
To: bitcoin-dev@lists.linuxfoundation.org
Content-Type: multipart/alternative; boundary=001a1145b556d03b4d053809bbb0
Subject: [bitcoin-dev] BIP draft: HTLC transactions
Precedence: list

--001a1145b556d03b4d053809bbb0
Content-Type: text/plain; charset=UTF-8

I'm requesting feedback for Hash Time-Locked Contract (HTLC) transactions
in Bitcoin.

HTLC transactions allow you to pay for the preimage of a hash. CSV/CLTV can
be used to recover your funds if the other party is not cooperative. These
scripts take the following general form:

    [HASHOP] <digest> OP_EQUAL
    OP_IF
        <seller pubkey>
    OP_ELSE
        <num> [TIMEOUTOP] OP_DROP <buyer pubkey>
    OP_ENDIF
    OP_CHECKSIG

These transactions are useful for both the Lightning network and in
zero-knowledge contingent payments. This very script (using CLTV and
SHA256) was used as part of our "pay-to-sudoku" ZKCP demo earlier this
year: https://github.com/zcash/pay-to-sudoku

Members of the community have expressed the desire for a BIP to submitted
in coordination with changes to Bitcoin Core that support these
transactions in the wallet.

Please review my draft BIP here:
https://gist.github.com/ebfull/8306903041d46e4119a39442f72a3741

An implementation is being worked on here:
https://github.com/bitcoin/bitcoin/pull/7601

Thanks!

Sean Bowe
Zcash

--001a1145b556d03b4d053809bbb0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>I&#39;m requesting feedback for Hash Time-Locked Cont=
ract (HTLC) transactions in Bitcoin.</div><div><br></div><div>HTLC transact=
ions allow you to pay for the preimage of a hash. CSV/CLTV can be used to r=
ecover your funds if the other party is not cooperative. These scripts take=
 the following general form:</div><div><br></div><div><div>=C2=A0 =C2=A0 [H=
ASHOP] &lt;digest&gt; OP_EQUAL</div><div>=C2=A0 =C2=A0 OP_IF</div><div>=C2=
=A0 =C2=A0 =C2=A0 =C2=A0 &lt;seller pubkey&gt;</div><div>=C2=A0 =C2=A0 OP_E=
LSE</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 &lt;num&gt; [TIMEOUTOP] OP_DROP &=
lt;buyer pubkey&gt;</div><div>=C2=A0 =C2=A0 OP_ENDIF</div><div>=C2=A0 =C2=
=A0 OP_CHECKSIG</div></div><div><br></div><div>These transactions are usefu=
l for both the Lightning network and in zero-knowledge contingent payments.=
 This very script (using CLTV and SHA256) was used as part of our &quot;pay=
-to-sudoku&quot; ZKCP demo earlier this year:=C2=A0<a href=3D"https://githu=
b.com/zcash/pay-to-sudoku">https://github.com/zcash/pay-to-sudoku</a></div>=
<div><br></div><div>Members of the community have expressed the desire for =
a BIP to submitted in coordination with changes to Bitcoin Core that suppor=
t these transactions in the wallet.</div><div><br></div><div>Please review =
my draft BIP here:=C2=A0<a href=3D"https://gist.github.com/ebfull/830690304=
1d46e4119a39442f72a3741">https://gist.github.com/ebfull/8306903041d46e4119a=
39442f72a3741</a></div><div><br></div><div>An implementation is being worke=
d on here:=C2=A0<a href=3D"https://github.com/bitcoin/bitcoin/pull/7601">ht=
tps://github.com/bitcoin/bitcoin/pull/7601</a><br></div><div><br></div><div=
>Thanks!</div><div><br></div><div>Sean Bowe<br></div><div>Zcash</div></div>

--001a1145b556d03b4d053809bbb0--