1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
|
Return-Path: <pete@petertodd.org>
Received: from smtp1.osuosl.org (smtp1.osuosl.org [IPv6:2605:bc80:3010::138])
by lists.linuxfoundation.org (Postfix) with ESMTP id 7E839C0032;
Wed, 8 Nov 2023 02:06:34 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
by smtp1.osuosl.org (Postfix) with ESMTP id 4466781E18;
Wed, 8 Nov 2023 02:06:34 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 smtp1.osuosl.org 4466781E18
Authentication-Results: smtp1.osuosl.org; dkim=pass (2048-bit key,
unprotected) header.d=messagingengine.com header.i=@messagingengine.com
header.a=rsa-sha256 header.s=fm3 header.b=psMivGwV
X-Virus-Scanned: amavisd-new at osuosl.org
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5
tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H5=0.001,
RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001]
autolearn=ham autolearn_force=no
Received: from smtp1.osuosl.org ([127.0.0.1])
by localhost (smtp1.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id lrb_76EjbMQl; Wed, 8 Nov 2023 02:06:31 +0000 (UTC)
Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com
[66.111.4.27])
by smtp1.osuosl.org (Postfix) with ESMTPS id AA17F81E17;
Wed, 8 Nov 2023 02:06:29 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 smtp1.osuosl.org AA17F81E17
Received: from compute6.internal (compute6.nyi.internal [10.202.2.47])
by mailout.nyi.internal (Postfix) with ESMTP id 1803D5C0244;
Tue, 7 Nov 2023 21:06:26 -0500 (EST)
Received: from mailfrontend2 ([10.202.2.163])
by compute6.internal (MEProxy); Tue, 07 Nov 2023 21:06:26 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
messagingengine.com; h=cc:cc:content-type:content-type:date:date
:feedback-id:feedback-id:from:from:in-reply-to:in-reply-to
:message-id:mime-version:references:reply-to:sender:subject
:subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender
:x-sasl-enc; s=fm3; t=1699409186; x=1699495586; bh=m8hAOp/I5cHob
2JO72ZDepROHKIMHS6o4orstUjV5ys=; b=psMivGwV2yVOqJ1OVHC3ifh505AiE
rK3JfSN5ddqCtfHfO/VGE3jlIeBeS2IAHGB02IGMf3LQ1ZXZoFQAvCZZ1Wm4atHp
WYsyXH+GWkOrj3kHmA0ANezfdqoqgFQ8lpEtf11mbsCfZvkZB39K1ulT0GqEjo9d
n+VNwLomAIQwAfI98P42qYsoGqniXe/yj+wzGO/F1H/6vXIbB/AK7YSWKPV98JTI
zh1Sy5/EGF1fBiOg56oAPNDdUxbh+ACVTG23QQApSWaUii0RsvQBXO6F9CaLG8BX
2VhfuoUtAYiy2lc0zweVG2R2Fc85ErksEA3hXNmjLoFa0JPVS7tNIuzjA==
X-ME-Sender: <xms:Ie1KZWJbAalPvhbnH6o2T__7H_DmIScOcLlxTGQ6C0X2fns4LCJYfg>
<xme:Ie1KZeIQ_K-o4aCqUT-vuxS4zcyFzRlPI5hRbwOxLzgc4QOQ6HRsPOYBz_G_X6TYy
GluFOxWpEZpKhWEkE8>
X-ME-Received: <xmr:Ie1KZWuUNun07szHrMvyFPh5CkD1cN_lJrQWHy6n3kiY4d2NIcXQV61Q>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedruddukedggeduucetufdoteggodetrfdotf
fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne
cujfgurhepfffhvfevuffkfhggtggujgesghdtreertddtvdenucfhrhhomheprfgvthgv
rhcuvfhougguuceophgvthgvsehpvghtvghrthhouggurdhorhhgqeenucggtffrrghtth
gvrhhnpeelvdellefftddukeduffejgfefjeeuheeileeftdfgteduteeggeevueethfej
tdenucffohhmrghinhepphgvthgvrhhtohguugdrohhrghenucevlhhushhtvghrufhiii
gvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehpvghtvgesphgvthgvrhhtohguugdr
ohhrgh
X-ME-Proxy: <xmx:Ie1KZba_HDclTq_76BPJXpuyarK2HrJ58Xke_p9rYKVLe3YJ9F2VOQ>
<xmx:Ie1KZdbohhckWuyG8fGPpQwvPP9fVEdInDs8UpwXCBpvI9IfB68jTg>
<xmx:Ie1KZXAD0PPrfBdS2GxnsQ_VaBuMIIea--VkjjgNZJ5OMjfKHNWZMg>
<xmx:Iu1KZQwDrKGIRcgdZF7PPFW6-B3B08pWQBV8C1SQt1V180yPELgjkQ>
Feedback-ID: i525146e8:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue,
7 Nov 2023 21:06:25 -0500 (EST)
Received: by localhost (Postfix, from userid 1000)
id 4A3BF5F81E; Wed, 8 Nov 2023 02:06:23 +0000 (UTC)
Date: Wed, 8 Nov 2023 02:06:23 +0000
From: Peter Todd <pete@petertodd.org>
To: Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Message-ID: <ZUrtHyQBOEZTM3Bj@petertodd.org>
References: <CALZpt+EZqfj=G=E37hA+k9pKYfvE0jkc3UU+H8sJVm=H3CO-JA@mail.gmail.com>
<CALZpt+GXGBbo0JjOyMr3B-3dVY2Q_DuzF6Sn3xE5W24x77PRYg@mail.gmail.com>
<ZUrbk9a9jiL87pxd@petertodd.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature"; boundary="9WGNm2G3b0rE/pXf"
Content-Disposition: inline
In-Reply-To: <ZUrbk9a9jiL87pxd@petertodd.org>
Cc: security@ariard.me, "lightning-dev\\\\@lists.linuxfoundation.org"
<lightning-dev@lists.linuxfoundation.org>
Subject: Re: [bitcoin-dev] OP_Expire and Coinbase-Like Behavior: Making
HTLCs Safer by Letting Transactions Expire Safely
X-BeenThere: bitcoin-dev@lists.linuxfoundation.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Bitcoin Protocol Discussion <bitcoin-dev.lists.linuxfoundation.org>
List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/bitcoin-dev>,
<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=unsubscribe>
List-Archive: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/>
List-Post: <mailto:bitcoin-dev@lists.linuxfoundation.org>
List-Help: <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=help>
List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev>,
<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Nov 2023 02:06:34 -0000
--9WGNm2G3b0rE/pXf
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Wed, Nov 08, 2023 at 12:51:31AM +0000, Peter Todd via bitcoin-dev wrote:
> > In a post-package relay world, I think this is possible. And that
> > replacement cycling attacks are breaking future dynamic fee-bumping of
> > pre-signed transactions concerns me a lot.
>=20
> Well the answer here is pretty clear: v3 package relay with anchors is br=
oken.
BTW a subtlety of this that may not be obvious is that in v3 package relay,
with zero value outputs, the outputs must be spent in the same package. Thus
_unlike_ existing anchor-using transactions, there would be only one anchor
output on the commitment transaction.
In existing anchor output transactions, this type of attack wouldn't work as
when broadcasting the transaction, Alice would be spending her anchor outpu=
t,
which Bob can't double spend. But that doesn't work in v3, which intends to
limit UTXO growth by requiring that anchors be spent in the same package. T=
hus
unlike existing anchor outputs, an anchor would be truly a OP_1 output with=
out
a signature, and thus belong to either Alice nor Bob uniquely.
--=20
https://petertodd.org 'peter'[:-1]@petertodd.org
--9WGNm2G3b0rE/pXf
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----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=Dq80
-----END PGP SIGNATURE-----
--9WGNm2G3b0rE/pXf--
|
