1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
|
Return-Path: <rsomsen@gmail.com>
Received: from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])
by lists.linuxfoundation.org (Postfix) with ESMTP id E814FC0001
for <bitcoin-dev@lists.linuxfoundation.org>;
Sun, 23 May 2021 17:58:30 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
by smtp1.osuosl.org (Postfix) with ESMTP id D784D83653
for <bitcoin-dev@lists.linuxfoundation.org>;
Sun, 23 May 2021 17:58:30 +0000 (UTC)
X-Virus-Scanned: amavisd-new at osuosl.org
X-Spam-Flag: NO
X-Spam-Score: -0.199
X-Spam-Level:
X-Spam-Status: No, score=-0.199 tagged_above=-999 required=5
tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: smtp1.osuosl.org (amavisd-new);
dkim=pass (2048-bit key) header.d=gmail.com
Received: from smtp1.osuosl.org ([127.0.0.1])
by localhost (smtp1.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 2bHmU0ZNLKss
for <bitcoin-dev@lists.linuxfoundation.org>;
Sun, 23 May 2021 17:58:30 +0000 (UTC)
X-Greylist: whitelisted by SQLgrey-1.8.0
Received: from mail-ed1-x533.google.com (mail-ed1-x533.google.com
[IPv6:2a00:1450:4864:20::533])
by smtp1.osuosl.org (Postfix) with ESMTPS id BE84883658
for <bitcoin-dev@lists.linuxfoundation.org>;
Sun, 23 May 2021 17:58:29 +0000 (UTC)
Received: by mail-ed1-x533.google.com with SMTP id w12so21470683edx.1
for <bitcoin-dev@lists.linuxfoundation.org>;
Sun, 23 May 2021 10:58:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=gDEesQiy+gPAm6SdgLx9XpQy1Cv4U9y/0Lf0hO8FKVM=;
b=e+n4jJOrAe3WvRiZ92GHGQy1Usqb0joCSn9T46kVoZdtUz1fW48C/GJCmqwRbq1bvp
t9rubcFzsU9hXQzwRd7PKLWigcy877ikkyH9V5MmoKTn1Ri4StTxxI6Ir3ozdzkBHcht
ZpurLbEd5jOLPsHmJ9VA1YRRTlFQcEiuOtzyDaOpAeMfDw9fwqWiG/h/IxdvtzLBLuiJ
Ymp1DOQt/ZFWyy14xw2aIkaELjBaQCZ1KJdzdXCzDog8/NnLnkPfmmUrqiPpw4Ix052E
a+7+2tkBaTwis41dZ2jtw+Hdx5ObCwxqoLrzJ1A6KlQxzzx2cSJbRlRcPcRdxNE7EsnP
zDfQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=gDEesQiy+gPAm6SdgLx9XpQy1Cv4U9y/0Lf0hO8FKVM=;
b=Jy1xXmtPs0erOvfGSYV8TdYJZveni8v2iJRRBIS64GPv55smixzVXFgSsa8IDWdiT7
37j9YXMTnY+ucPaZ+1UZLRnSw1T5HSkBPi38pJsjmK98Fc4C7KRcRyG5OPPcdWz++7gK
MKBAenPZoV7P/boVieu/tcIubfstKRzATvfVClCI9skzdO9IQrGFRts8vvLxdMfDaKxx
B+BAO5vHe3FB4bcjmczNKdH+dlpaPwsH7epaMMO+zrXpDni8mRpnCX6fMa/eGrjARVOD
A+hfS8aWqd5xd9tVn/2VWiqDvKjGlOLIpUS+iv6JuQ1sp28C/ZzF+pbWtz9RD4WTc6in
1TMw==
X-Gm-Message-State: AOAM5303yr9iNoUePBNpLUYSOER5NuEw6W/jMnzEG8Hqo75dmb+XR3hO
bTCwECoG2wnJ8F7IiUxZx+lw+N3WutMBgCRTS+0=
X-Google-Smtp-Source: ABdhPJz5W5VbIkGBc/2Ni1IccKQEz3y3VDSfeCS2MCZL3GvY66hhTx9NwDIl5L2eBOA/T6Z9faCJTSi1WKS+kBP/6sk=
X-Received: by 2002:a50:bf0f:: with SMTP id f15mr20173681edk.205.1621792708097;
Sun, 23 May 2021 10:58:28 -0700 (PDT)
MIME-Version: 1.0
References: <132101705-ebaab3ce4df3e652b9f8ce0ce856f62e@pmq7v.m5r2.onet>
In-Reply-To: <132101705-ebaab3ce4df3e652b9f8ce0ce856f62e@pmq7v.m5r2.onet>
From: Ruben Somsen <rsomsen@gmail.com>
Date: Sun, 23 May 2021 19:58:13 +0200
Message-ID: <CAPv7Tja_oAvJ1HUmmWTgE9JK0J8_2zbBdutY_Zzeog_cxsVS_w@mail.gmail.com>
To: vjudeu <vjudeu@gazeta.pl>,
Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Content-Type: multipart/alternative; boundary="00000000000043f88e05c3030a16"
X-Mailman-Approved-At: Sun, 23 May 2021 17:59:46 +0000
Subject: Re: [bitcoin-dev] Tweaking tapscript instead of public key
X-BeenThere: bitcoin-dev@lists.linuxfoundation.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Bitcoin Protocol Discussion <bitcoin-dev.lists.linuxfoundation.org>
List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/bitcoin-dev>,
<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=unsubscribe>
List-Archive: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/>
List-Post: <mailto:bitcoin-dev@lists.linuxfoundation.org>
List-Help: <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=help>
List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev>,
<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=subscribe>
X-List-Received-Date: Sun, 23 May 2021 17:58:31 -0000
--00000000000043f88e05c3030a16
Content-Type: text/plain; charset="UTF-8"
Hi,
That's an excellent question, but note that answering such questions is not
the primary function of this mailing list. Places like Bitcoin Stack
Exchange or even IRC are probably better for that!
Specific to your question: in Taproot Q = P + hash(P||m)*G. The fact that P
is hashed together with the message, makes it a commitment. If you try to
change m to e.g. m2, then Q - hash(P||m2) will never result in P (unless
the hash function is broken).
The original Taproot thread can be found here:
https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-January/015614.html
Cheers,
Ruben
On Sun, May 23, 2021 at 7:10 PM vjudeu via bitcoin-dev <
bitcoin-dev@lists.linuxfoundation.org> wrote:
> As far as I know, P2TR address contains 32-byte public key. It can be used
> directly by creating Schnorr signature or indirectly, by revealing
> tapscript. Does it mean that any taproot output could be modified
> on-the-fly after being confirmed without changing an address? I mean, if we
> have base point as the private key with P2TR address
> tb1p0xlxvlhemja6c4dqv22uapctqupfhlxm9h8z3k2e72q4k9hcz7vqqzj3dz, then the
> owner of that key can modify spending conditions without moving on-chain
> coins?
> _______________________________________________
> bitcoin-dev mailing list
> bitcoin-dev@lists.linuxfoundation.org
> https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
>
--00000000000043f88e05c3030a16
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Hi,<div><br></div><div>That's an excellent question, b=
ut note that answering such questions is not the primary function of this m=
ailing list. Places like Bitcoin Stack Exchange or even IRC are probably be=
tter for that!<br><br>Specific to your question: in Taproot Q =3D P + hash(=
P||m)*G. The fact that P is hashed together with the message, makes it a co=
mmitment. If you try to change m to e.g. m2, then Q - hash(P||m2) will neve=
r result in P (unless the hash function is broken).<br><br>The original Tap=
root thread can be found here:</div><div><a href=3D"https://lists.linuxfoun=
dation.org/pipermail/bitcoin-dev/2018-January/015614.html">https://lists.li=
nuxfoundation.org/pipermail/bitcoin-dev/2018-January/015614.html</a><br></d=
iv><div><br></div><div>Cheers,</div><div>Ruben</div></div><br><div class=3D=
"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Sun, May 23, 2021 at=
7:10 PM vjudeu via bitcoin-dev <<a href=3D"mailto:bitcoin-dev@lists.lin=
uxfoundation.org">bitcoin-dev@lists.linuxfoundation.org</a>> wrote:<br><=
/div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bo=
rder-left:1px solid rgb(204,204,204);padding-left:1ex"><div>As far as I kno=
w, P2TR address contains 32-byte public key. It can be used directly by cre=
ating Schnorr signature or indirectly, by revealing tapscript. Does it mean=
that any taproot output could be modified on-the-fly after being confirmed=
without changing an address? I mean, if we have base point as the private =
key with P2TR address tb1p0xlxvlhemja6c4dqv22uapctqupfhlxm9h8z3k2e72q4k9hcz=
7vqqzj3dz, then the owner of that key can modify spending conditions withou=
t moving on-chain coins?</div>
_______________________________________________<br>
bitcoin-dev mailing list<br>
<a href=3D"mailto:bitcoin-dev@lists.linuxfoundation.org" target=3D"_blank">=
bitcoin-dev@lists.linuxfoundation.org</a><br>
<a href=3D"https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev" =
rel=3D"noreferrer" target=3D"_blank">https://lists.linuxfoundation.org/mail=
man/listinfo/bitcoin-dev</a><br>
</blockquote></div>
--00000000000043f88e05c3030a16--
|
