1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
|
Delivery-date: Tue, 18 Jun 2024 04:46:34 -0700
Received: from mail-oi1-f191.google.com ([209.85.167.191])
by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.94.2)
(envelope-from <bitcoindev+bncBDL4XL646QOBBEXHYWZQMGQETRWJGBQ@googlegroups.com>)
id 1sJXII-0000MD-Bg
for bitcoindev@gnusha.org; Tue, 18 Jun 2024 04:46:34 -0700
Received: by mail-oi1-f191.google.com with SMTP id 5614622812f47-3d21b50f896sf5916893b6e.0
for <bitcoindev@gnusha.org>; Tue, 18 Jun 2024 04:46:34 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1718711188; cv=pass;
d=google.com; s=arc-20160816;
b=Qa7UXFl8alkg8KqWlxH5tW5VVxTshiCSm9gha8rEaeX9+HWmJoAserKzVXsB3QGkh2
8TG72qs8iM9IqfbVTkep4+1QXRWDoDOwb4tYQVh2F9GHH+c/w0opks47HupyUGPb2rUp
8mm5OG24Yj8ZqWH8J+4YWBzTqW0Spo7J50jLVFkZGX8P5W0/v4bydBuae3nL0MfEU7RW
8cxbb7s+CpWSVUGcCvO5hhHW43XWJOUKapu01ag3qTkzk8WQNzg1xj4QX01iCBk7xoFK
Hd3gPzV6IHdwOVC2smY+iQYUz4gbYyBKaw0vJmL16Kj63FfSEetNaYBP9DoAU3e+jHRZ
lbhw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:reply-to:mime-version:feedback-id
:references:in-reply-to:message-id:subject:cc:from:to:date
:dkim-signature;
bh=tCoj0DWzJWhK8npUbmp6rwQDlxMtn4WgpPnf/gCQQQ8=;
fh=xYYzAI3ae4yHFC3k3qK742uqSeheNLgRyjN+fs99m3E=;
b=sGWcX6qnheeIXcxsz53oW46kolb95k6s37W1uF2rIQVk+/FEGvRIQEnVPDy+PZJgrF
+3yHygP/GO2F1Q4Ap1XoxMMVaBFvFcMcj43/80gL5h/kvhlud7qWv9G6H/ODSsy/cRnz
DjOkJ3FISxbS+kGro/SvNo+lcYnxxN62Gpy+ijAGZ56l9njhlGIaftJilvTtpdP4cwxT
wOGUhblfKPChedQNLKogqUOZueCBUDtFrJmFfWp4rASiZHmOMQgkuYSNf+/BfH8WejBI
vwOgYkC0jYaRUx49MaMrofVx/wjl8Qh84hMBf6dFfRfVkcLSEzmeyuXn5itXFpOpiKTg
tjQA==;
darn=gnusha.org
ARC-Authentication-Results: i=2; gmr-mx.google.com;
dkim=pass header.i=@protonmail.com header.s=protonmail3 header.b=CAvx4AVQ;
spf=pass (google.com: domain of darosior@protonmail.com designates 185.70.43.167 as permitted sender) smtp.mailfrom=darosior@protonmail.com;
dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=protonmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlegroups.com; s=20230601; t=1718711188; x=1719315988; darn=gnusha.org;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:reply-to
:x-original-authentication-results:x-original-sender:mime-version
:feedback-id:references:in-reply-to:message-id:subject:cc:from:to
:date:from:to:cc:subject:date:message-id:reply-to;
bh=tCoj0DWzJWhK8npUbmp6rwQDlxMtn4WgpPnf/gCQQQ8=;
b=H/CLNzDVYMQfzYjhNcCcWk3WjT3vyHGHmLXNG8+p2Pq5Hk7u3TxiSWw1/GxU8vW7vD
D+ZZqCRttfQui9Xr2G3SYE8tUSNsBkuQDbM8UJ3hc2Ef0ejgTNV7LgDSMNqPomqXV+tJ
H3uySs5CsXWyU861JjLD2vd4opSF2s1IRDNzbCT5Wr15lspjN0x7p2tkHxDP1o4KyG1Q
BBpPBhTmhex3U8SJwVUTZHMuuACGJwhA4bIQsBD4TS8nWcIVNPLnmbWPPX/HHF8dbvEE
n0iGVamlCqlUFMZgpPz4xzKKu4LJsADiVvLggzd4qnbTf1evbQLNtVZlJSYHpfX+2Po1
1+FQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1718711188; x=1719315988;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:reply-to
:x-original-authentication-results:x-original-sender:mime-version
:feedback-id:references:in-reply-to:message-id:subject:cc:from:to
:date:x-beenthere:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=tCoj0DWzJWhK8npUbmp6rwQDlxMtn4WgpPnf/gCQQQ8=;
b=SBURoUy0MgKwAbqVfvn5iGlH0dWoSl0iIC8mw+WUYB0D3rXqM+tttQBS0TOBXX3Xig
t5PNqxN8m1T6v8epnGmW7pWiZkZyoQEX1mWLwPMyKlH0gcxtuhVm+0X4fNNMKJrTmlZR
9KBTI0BvkK/5zrnuy5I49/mp/wi2HT7rwjaSIlebd5FBqYxmva9WnZmkY8XkUFxFooDn
VnSJZ+jbhGDFDvyrKa68p/HyOWX38+fx3H4yeuHjNOOTJmwfq/6DALbpK3fYCmo5iQ+Z
OAlGiV+gnvPaI3zAR6Todevhu1zN2dKiKEQxFpxTeBfjn7K6qCLwgyBPHV//M9pdcIKQ
LyeQ==
X-Forwarded-Encrypted: i=2; AJvYcCUKqfuG81vkNHaNU6iRXBASJ+ivVwaC7C/6N7Yh0o7VdlyEp0LY5RSDoRpABNeX7nFENzUWFW2IUyxvmNmaHRbeBww+YLo=
X-Gm-Message-State: AOJu0YxyKUBrd32FwLPZeLUmlTX/WyzfqYtkbiiRAip2+MmFxYqO7QJW
tkoZrXmbSDl6up+U2B15D2nEP6/0iuO7YQpAGsinR89+DqAySzNS
X-Google-Smtp-Source: AGHT+IGX6hdi3nq+Tgt2NyqN9YGJMJEQZttmO05GuVMpe9YnVnopIsw2SJ0QtLAfYQSbebD6I+tvHA==
X-Received: by 2002:a05:6808:178e:b0:3d2:277e:45e3 with SMTP id 5614622812f47-3d24e8ce5a3mr13986686b6e.13.1718711187855;
Tue, 18 Jun 2024 04:46:27 -0700 (PDT)
X-BeenThere: bitcoindev@googlegroups.com
Received: by 2002:ac8:5915:0:b0:440:a6ed:f91e with SMTP id d75a77b69052e-4417ac22a0cls76528231cf.1.-pod-prod-04-us;
Tue, 18 Jun 2024 04:46:26 -0700 (PDT)
X-Received: by 2002:a05:620a:4051:b0:797:de98:1437 with SMTP id af79cd13be357-798d269438cmr54336685a.13.1718711186357;
Tue, 18 Jun 2024 04:46:26 -0700 (PDT)
Received: by 2002:a05:620a:7282:b0:795:48dd:de1d with SMTP id af79cd13be357-79ba84019a0ms85a;
Tue, 18 Jun 2024 01:13:51 -0700 (PDT)
X-Received: by 2002:a05:600c:4ec8:b0:421:c932:f5e1 with SMTP id 5b1f17b1804b1-42304823318mr103841565e9.2.1718698429538;
Tue, 18 Jun 2024 01:13:49 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1718698429; cv=none;
d=google.com; s=arc-20160816;
b=ujFjP8ed5CFY2FYwXxPViAP5uGS98rdvUXiwnsg5oMRKM0/Mp1dE7mYgMiVniLFuAa
Yxu/PeZD6JAy37xjlLvIN/z51vS3aU3NqaIdQVaIjoEreqOzSPb3Y9qyk8/2TTxyUYHf
58EXLgcBy2nhJ4nvnnQwSnGAy6A9H/tulsXUMeW1HGhbAj2zkbqoLVR85EQOyLY5wbqP
quCAZglj2OVzJ10Pa1MFqTQut+SPWZqxw9iaEbhciv3j1zHQkP/8404nBNhmXLAX3YgQ
Tq0HmGP1ieKeJ/FWiwBrqFjb/D9f4oKfiDKFfwYV0HAA+Hxmg/gp2954OCSoXNOMHwsP
BO3A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:feedback-id:references:in-reply-to:message-id:subject
:cc:from:to:date:dkim-signature;
bh=gjDBQgKEl7mxTqH+tMjQUs3F5IVlte0NeQs7lYH6SPc=;
fh=VUyRMGDsLDyKXHBc8DWjokFBiSMTvXavinKdBJZhUls=;
b=Kh7C52IZcXDUvZ/Ih1ya2zrRbCro9HRXvA75g9/c+OLGENud8Fg4B8H+bF+G+cNrj1
ajs7TN8JUCeN1j66vPibPIwnlvkMx/gXMa+omm43kabyL/WUJXLEAUpLC0ck6hyJ2hn1
55CsjCZqYykDl3/5cmyAwEeKKL/vgzi6sjxz1npp6rAVQ77biW701CDaesrp26kJ3yi/
OGDzUD+a1MXijLM8UsIvwN9BYGaIqP5jQJURFOmQ/+0jsId6htpXR/93iqGSnRd2sVda
RdFjbjQ3MdFV4YrD0/WD3M9uLN6vBn8sZys6cBQ8YPfhmami4ohDjcSQ02hZT5LeTdpR
Dxjw==;
dara=google.com
ARC-Authentication-Results: i=1; gmr-mx.google.com;
dkim=pass header.i=@protonmail.com header.s=protonmail3 header.b=CAvx4AVQ;
spf=pass (google.com: domain of darosior@protonmail.com designates 185.70.43.167 as permitted sender) smtp.mailfrom=darosior@protonmail.com;
dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=protonmail.com
Received: from mail-43167.protonmail.ch (mail-43167.protonmail.ch. [185.70.43.167])
by gmr-mx.google.com with ESMTPS id 5b1f17b1804b1-42300f54a31si2731885e9.2.2024.06.18.01.13.49
for <bitcoindev@googlegroups.com>
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 18 Jun 2024 01:13:49 -0700 (PDT)
Received-SPF: pass (google.com: domain of darosior@protonmail.com designates 185.70.43.167 as permitted sender) client-ip=185.70.43.167;
Date: Tue, 18 Jun 2024 08:13:44 +0000
To: Eric Voskuil <eric@voskuil.org>
From: "'Antoine Poinsot' via Bitcoin Development Mailing List" <bitcoindev@googlegroups.com>
Cc: Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
Subject: Re: [bitcoindev] Re: Great Consensus Cleanup Revival
Message-ID: <heKH68GFJr4Zuf6lBozPJrb-StyBJPMNvmZL0xvKFBnBGVA3fVSgTLdWc-_8igYWX8z3zCGvzflH-CsRv0QCJQcfwizNyYXlBJa_Kteb2zg=@protonmail.com>
In-Reply-To: <72e83c31-408f-4c13-bff5-bf0789302e23n@googlegroups.com>
References: <gnM89sIQ7MhDgI62JciQEGy63DassEv7YZAMhj0IEuIo0EdnafykF6RH4OqjTTHIHsIoZvC2MnTUzJI7EfET4o-UQoD-XAQRDcct994VarE=@protonmail.com> <72e83c31-408f-4c13-bff5-bf0789302e23n@googlegroups.com>
Feedback-ID: 7060259:user:proton
X-Pm-Message-ID: 26b8ce5df15dd67567aa011e29f10c68ffa1d558
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_7ZstBLrbDOiDQNkGaD5e34Z7R11hdS9N6eDIC7GyxqU"
X-Original-Sender: darosior@protonmail.com
X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass
header.i=@protonmail.com header.s=protonmail3 header.b=CAvx4AVQ;
spf=pass (google.com: domain of darosior@protonmail.com designates
185.70.43.167 as permitted sender) smtp.mailfrom=darosior@protonmail.com;
dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=protonmail.com
X-Original-From: Antoine Poinsot <darosior@protonmail.com>
Reply-To: Antoine Poinsot <darosior@protonmail.com>
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com
List-ID: <bitcoindev.googlegroups.com>
X-Google-Group-Id: 786775582512
List-Post: <https://groups.google.com/group/bitcoindev/post>, <mailto:bitcoindev@googlegroups.com>
List-Help: <https://groups.google.com/support/>, <mailto:bitcoindev+help@googlegroups.com>
List-Archive: <https://groups.google.com/group/bitcoindev
List-Subscribe: <https://groups.google.com/group/bitcoindev/subscribe>, <mailto:bitcoindev+subscribe@googlegroups.com>
List-Unsubscribe: <mailto:googlegroups-manage+786775582512+unsubscribe@googlegroups.com>,
<https://groups.google.com/group/bitcoindev/subscribe>
X-Spam-Score: -1.0 (-)
This is a multi-part message in MIME format.
--b1_7ZstBLrbDOiDQNkGaD5e34Z7R11hdS9N6eDIC7GyxqU
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi Eric,
It is. This is what is implemented in Bitcoin Core, see [this snippet](http=
s://github.com/bitcoin/bitcoin/blob/41544b8f96dbc9c6b8998acd6522200d67cdc16=
d/src/validation.cpp#L4547-L4552) and section 4.1 of the document you refer=
ence:
> Another check that was also being done in CheckBlock() relates to the coi=
nbase transaction: if the first transaction in a block fails the required s=
tructure of a coinbase =E2=80=93 one input, with previous output hash of al=
l zeros and index of all ones =E2=80=93 then the block will fail validation=
. The side effect of this test being in CheckBlock() was that even though t=
he block malleability discussed in section 3.1 was unknown, we were effecti=
vely protected against it =E2=80=93 as described above, it would take at le=
ast 224 bits of work to produce a malleated block that passed the coinbase =
check.
Best,
Antoine
On Tuesday, June 18th, 2024 at 12:15 AM, Eric Voskuil <eric@voskuil.org> wr=
ote:
> Hi Antoine,
>
> Regarding potential malleability pertaining to blocks with only 64 byte t=
ransactions, why is not a deserialization phase check for the coinbase inpu=
t as a null point not sufficient mitigation (computational infeasibility) f=
or any implementation that desires to perform permanent invalidity marking?
>
> Best,
> Eric
>
> ref: [Weaknesses in Bitcoin=E2=80=99s Merkle Root Construction](https://l=
ists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20190225/a27d883=
7/attachment-0001.pdf)
>
> --
> You received this message because you are subscribed to the Google Groups=
"Bitcoin Development Mailing List" group.
> To unsubscribe from this group and stop receiving emails from it, send an=
email to bitcoindev+unsubscribe@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgi=
d/bitcoindev/72e83c31-408f-4c13-bff5-bf0789302e23n%40googlegroups.com.
--=20
You received this message because you are subscribed to the Google Groups "=
Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/=
bitcoindev/heKH68GFJr4Zuf6lBozPJrb-StyBJPMNvmZL0xvKFBnBGVA3fVSgTLdWc-_8igYW=
X8z3zCGvzflH-CsRv0QCJQcfwizNyYXlBJa_Kteb2zg%3D%40protonmail.com.
--b1_7ZstBLrbDOiDQNkGaD5e34Z7R11hdS9N6eDIC7GyxqU
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div style=3D"font-family: Arial, sans-serif; font-size: 14px; color: rgb(0=
, 0, 0); background-color: rgb(255, 255, 255);">Hi Eric,</div><div style=3D=
"font-family: Arial, sans-serif; font-size: 14px; color: rgb(0, 0, 0); back=
ground-color: rgb(255, 255, 255);"><br></div><div style=3D"font-family: Ari=
al, sans-serif; font-size: 14px; color: rgb(0, 0, 0); background-color: rgb=
(255, 255, 255);">It is. This is what is implemented in Bitcoin Core, see <=
a href=3D"https://github.com/bitcoin/bitcoin/blob/41544b8f96dbc9c6b8998acd6=
522200d67cdc16d/src/validation.cpp#L4547-L4552" title=3D"this snippet">this=
snippet</a> and section 4.1 of the document you reference:</div><blockquot=
e style=3D"border-color: rgb(200, 200, 200); border-left: 3px solid rgb(200=
, 200, 200); padding-left: 10px; color: rgb(102, 102, 102);"><div style=3D"=
font-family: Arial, sans-serif; font-size: 14px; color: rgb(0, 0, 0); backg=
round-color: rgb(255, 255, 255);"><span>Another check that was also being d=
one in </span><span>CheckBlock() relates to the coinbase transaction: if th=
e first transaction in a </span><span>block fails the required structure of=
a coinbase =E2=80=93 one input, with previous output </span><span>hash of =
all zeros and index of all ones =E2=80=93 then the block will fail validati=
on. The </span><span>side effect of this test being in CheckBlock() was tha=
t even though the block </span><span>malleability discussed in section 3.1 =
was unknown, we were effectively protected </span><span>against it =E2=80=
=93 as described above, it would take at least 224 bits of work to produce<=
/span><span> a malleated block that passed the coinbase check.</span><br></=
div></blockquote><div style=3D"font-family: Arial, sans-serif; font-size: 1=
4px; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);"><br></div>=
<div style=3D"font-family: Arial, sans-serif; font-size: 14px; color: rgb(0=
, 0, 0); background-color: rgb(255, 255, 255);">Best,<br></div><div style=
=3D"font-family: Arial, sans-serif; font-size: 14px; color: rgb(0, 0, 0); b=
ackground-color: rgb(255, 255, 255);">Antoine<br></div><div class=3D"proton=
mail_quote">
On Tuesday, June 18th, 2024 at 12:15 AM, Eric Voskuil <eric@vosk=
uil.org> wrote:<br>
<blockquote class=3D"protonmail_quote" type=3D"cite">
Hi Antoine,<br><br>Regarding potential malleability pertaining =
to blocks with only 64 byte transactions, why is not a deserialization phas=
e check for the coinbase input as a null point not sufficient mitigation (c=
omputational infeasibility) for any implementation that desires to perform =
permanent invalidity marking?<br><br>Best,<br>Eric<div><br></div><div>ref: =
<a href=3D"https://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachme=
nts/20190225/a27d8837/attachment-0001.pdf" rel=3D"noreferrer nofollow noope=
ner" target=3D"_blank">Weaknesses in Bitcoin=E2=80=99s Merkle Root Construc=
tion</a><br></div>
<p></p>
-- <br>
You received this message because you are subscribed to the Google Groups "=
Bitcoin Development Mailing List" group.<br>
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev+unsubscribe@googlegroups.com" rel=3D"n=
oreferrer nofollow noopener" target=3D"_blank">bitcoindev+unsubscribe@googl=
egroups.com</a>.<br>
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/d/msgid/bitcoindev/72e83c31-408f-4c13-bff5-bf0789302e23n%40googlegroups.=
com" rel=3D"noreferrer nofollow noopener" target=3D"_blank">https://groups.=
google.com/d/msgid/bitcoindev/72e83c31-408f-4c13-bff5-bf0789302e23n%40googl=
egroups.com</a>.<br>
</blockquote><br>
</div>
<p></p>
-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List" group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev+unsubscribe@googlegroups.com">bitcoind=
ev+unsubscribe@googlegroups.com</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/d/msgid/bitcoindev/heKH68GFJr4Zuf6lBozPJrb-StyBJPMNvmZL0xvKFBnBGVA3fVSgT=
LdWc-_8igYWX8z3zCGvzflH-CsRv0QCJQcfwizNyYXlBJa_Kteb2zg%3D%40protonmail.com?=
utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d/msgid/b=
itcoindev/heKH68GFJr4Zuf6lBozPJrb-StyBJPMNvmZL0xvKFBnBGVA3fVSgTLdWc-_8igYWX=
8z3zCGvzflH-CsRv0QCJQcfwizNyYXlBJa_Kteb2zg%3D%40protonmail.com</a>.<br />
--b1_7ZstBLrbDOiDQNkGaD5e34Z7R11hdS9N6eDIC7GyxqU--
|