1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
|
Delivery-date: Tue, 03 Jun 2025 14:40:40 -0700
Received: from mail-qk1-f191.google.com ([209.85.222.191])
by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.94.2)
(envelope-from <bitcoindev+bncBCYMD7OS6ECBBTOX7XAQMGQEWTO62LQ@googlegroups.com>)
id 1uMZN9-0001m1-F2
for bitcoindev@gnusha.org; Tue, 03 Jun 2025 14:40:40 -0700
Received: by mail-qk1-f191.google.com with SMTP id af79cd13be357-7caee988153sf1029491085a.1
for <bitcoindev@gnusha.org>; Tue, 03 Jun 2025 14:40:39 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1748986833; cv=pass;
d=google.com; s=arc-20240605;
b=Dgy7XYfHizEkAfGxLNIuSVmBn3ztQzldmmq8vsqL2rGgo2Wj6ROZLHDC1CuXYEyg1V
WlAtQFJLxW2g72GEHVky62qmmi1YC26CNS//yTVduUh1Ytrnq+ARMWIkBwlvW5MhbTIC
1XFk+euAe21nuAhxyO9dqCoe+mKHtxkn4TIi6pAgv3aMHmMFAKNrnHB+wSjZiLZzoOuE
ld74wCDO17Jgg0Pt2fgXfUQwMJwtqTdPCVmJGSS0BWrWxINhHMkcBX+QobW+4Afp25Tt
Hs91VCekmivQZwiVMyvIVKJfCr9eCeF9MM8YoBOv2WOYcyp8rIop2eXIxbxqwy9SaqfH
fzWQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:content-transfer-encoding:cc:to
:subject:message-id:date:from:in-reply-to:references:mime-version
:sender:dkim-signature:dkim-signature;
bh=RPiv2MQzSrwuy+kg7D7jvDBjM724YgcfP6HZA7/zL0c=;
fh=ZRbbTAYtSuGqF+/ByYyoY84BJPy35XjBv5Vx0Nq3nxE=;
b=EGBoQhnBsi0tWUwE52HlwJN9DnV6wTt6kxRuqBdc2ajoIcP4DJdHOcc5zYJbiBD6Nw
Bh7hXOY/RUUv2JAQOXj33B/wTMZ/h2s2SQOO0QNtkZ/5hIffYKpYOvL62iDqYGkxH2/n
Jp2oNfEZZ6tcZ1W8Hyo0Qv5j5BJEhQX5ICDoeU0xwII4SJLWfrV+FvaCpxoUPSyZu6Kp
ELWcgu2nRNdMRW67hE+2j96SCFJ0wV5nOJgdY+tAVzY7yiOoJill4lKSaOUhqcvDuRcQ
SCRvy1XeJJmwTGMKe2sd5QH2B81ye03JRW6M9L7xvhS/wie4ZKT70mVIOs/WMiHZmmFn
W9yw==;
darn=gnusha.org
ARC-Authentication-Results: i=2; gmr-mx.google.com;
dkim=pass header.i=@gmail.com header.s=20230601 header.b=aU7o1JhD;
spf=pass (google.com: domain of bnagaev@gmail.com designates 2607:f8b0:4864:20::62d as permitted sender) smtp.mailfrom=bnagaev@gmail.com;
dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;
dara=pass header.i=@googlegroups.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlegroups.com; s=20230601; t=1748986833; x=1749591633; darn=gnusha.org;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-authentication-results
:x-original-sender:content-transfer-encoding:cc:to:subject
:message-id:date:from:in-reply-to:references:mime-version:sender
:from:to:cc:subject:date:message-id:reply-to;
bh=RPiv2MQzSrwuy+kg7D7jvDBjM724YgcfP6HZA7/zL0c=;
b=UF/i1CYUFcq1w1/DXooKjE+BBxG7j3D5SEl4OAU4Hx2gFOwKeOk+QcBWlr5dEiqujL
cJqdDLu3X34FK/I3OF+QI+dTeF+JqRgK294D/dwaadbTz5qLPlHP6anLHujiaVzgf0n+
7beWqmXmN3jr2DXV2ewAsDpmqvqonwYODRwmHqnhqmy0aWIuFRL/YTymBiuPXTdfnw1f
gVrBMhTASFK5uEgl1jkS5uQEezzDf0JOxO026H+vpvxL9rOasGQgYvk3OXv64vQKqx/q
iIyiSp/L0OVBIl8pqcB+pcNE9HJlwvR4gNSNSLpoQZ0dNLS8Toiu8LMCQTnXSLUhtkwf
vGUw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1748986833; x=1749591633; darn=gnusha.org;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-authentication-results
:x-original-sender:content-transfer-encoding:cc:to:subject
:message-id:date:from:in-reply-to:references:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=RPiv2MQzSrwuy+kg7D7jvDBjM724YgcfP6HZA7/zL0c=;
b=QHK5YRfVDvm1mdnqzfEwSBmkEBTWs3VeNvsYONNhPUWlhrFUxyLvG+//wHo0+80v4A
Ea4F1lzEa5j1mNNr9mRgmMhNlnQkk+I/GJk+Pvmb8yBZyU4keskuZ2aUbxjRbPgp1/5L
l2v9seP06s8Rz1vg/nnLpntTi64Oe+/dJbUiwEMgMOJiikIkyLQ+Y7PmajdAHKsOZAgQ
PWbShs0sFu2346ReRR9k4uO0RTuYq1NKLAv18guMzsX8eyuTFnPrNCPDyOxsZgfy3NuP
QxZRFukGgGHZ7/vOHsI4Y0Q/CqfO3GScZpPVNc/J5n1x7MsMmqfLqejV172t108advuM
mlWg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1748986833; x=1749591633;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-authentication-results
:x-original-sender:content-transfer-encoding:cc:to:subject
:message-id:date:from:in-reply-to:references:mime-version
:x-beenthere:x-gm-message-state:sender:from:to:cc:subject:date
:message-id:reply-to;
bh=RPiv2MQzSrwuy+kg7D7jvDBjM724YgcfP6HZA7/zL0c=;
b=qdl6bdND3bBZg3J2XHK6MhqZbSVXkZF/FRVCWavVvckAuIG5KboNI/1meSYO8lbfTt
N0e3KraE1Nt7KpcZCpbBAK5wqDBIs0OjLClnaiteHRjLHVDjEGSmcS8EL5be4C6yanra
wOXY2DLjJab+oEkrX7TO683n19hzOPD7zk4ohhCeTfgq6IKCrSF7M8GJBYreOjn1ISc3
wLYw7CuUVtigv7MJkB6cLwLi6KxHL1IEcxJ2G7kj9hYZ+2bgm9eR8W5IVBaKr1RAwOPy
KLLwJIe/5lEb2FCYGVEN8JaavyKcC0/CpMFVHiZvYBHOkGnAI4BuVxnHsDffRPR55YB/
Zfuw==
Sender: bitcoindev@googlegroups.com
X-Forwarded-Encrypted: i=2; AJvYcCVd417DgSgQ1WUztUeA57KwPIkTOmYhXN0mxGc/9sA+MJag3i3HZ67cHppKTvXUeOBnQhtHXHHKvTId@gnusha.org
X-Gm-Message-State: AOJu0Yx/FWhsYZqeXjiZcvbtdjePFECWocyTMBF67aQIlxMQ37+S45SX
MAbEVBKC+3Gjn9Yyp8OB15MHSNaiL+fxM/y00xd4Upv+x5FEMwMspkC4
X-Google-Smtp-Source: AGHT+IEF0k/jtxAUak7DzLQCPZSzxh4pj0lg5hXlO596M8CKjH09aLOMGTPAQKcSYBImq3KuRjloOQ==
X-Received: by 2002:a05:620a:294b:b0:7c5:3c0a:ab7e with SMTP id af79cd13be357-7d21a66eb24mr8260085a.5.1748986833152;
Tue, 03 Jun 2025 14:40:33 -0700 (PDT)
X-BeenThere: bitcoindev@googlegroups.com; h=AZMbMZdq58HxjeFiDZ1zEFUh1WFKOWIgGwp32jxG2+Ebh3DD2g==
Received: by 2002:a0c:d785:0:b0:6fa:bd14:59a0 with SMTP id 6a1803df08f44-6fac5cfa853ls89389446d6.0.-pod-prod-01-us;
Tue, 03 Jun 2025 14:40:28 -0700 (PDT)
X-Received: by 2002:a05:6214:cc9:b0:6f8:a667:2957 with SMTP id 6a1803df08f44-6faf73566c8mr5140156d6.10.1748986828873;
Tue, 03 Jun 2025 14:40:28 -0700 (PDT)
Received: by 2002:a05:620a:27cc:b0:7c5:3b15:3956 with SMTP id af79cd13be357-7d210d61645ms85a;
Tue, 3 Jun 2025 14:27:25 -0700 (PDT)
X-Received: by 2002:a05:622a:4c8a:b0:4a4:30cf:c213 with SMTP id d75a77b69052e-4a5a68f8f4cmr220831cf.48.1748986044448;
Tue, 03 Jun 2025 14:27:24 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1748986044; cv=none;
d=google.com; s=arc-20240605;
b=N3c9rVmk3k2H8VsMvCTJXAHW9IV2+Ie+b+hQYEp6VbtRh8+/ckRMW3bayAqRJczJIH
694GmCsN6EtlX9EEnbwhBqwHs75n/sMOfrl7Pb7LyUMCgKjphlWcGseN5Nhp28iJ0KE/
G4QBe4usymoGGCu095V9fhJW/7+rnqq4Fm5+NGDKteQoPLEUrhN5Ck85fW8Qw7q8dMbn
Ktj9UqTQI+Fku0xm/W4xT1FdgPOSKmKup0FVo4lWiO3AyIOahbKuE/UjtU+/4U+ONDCw
qQCJnlsBHG6datyH3b6Q7GgjgI9CTKCZGNHRnLWdrGo8/5G7iYRXMBc2HCmHRHOiJaJz
8mQA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=content-transfer-encoding:cc:to:subject:message-id:date:from
:in-reply-to:references:mime-version:dkim-signature;
bh=ulTw/lVZEN2PWnioqptb9IAcoocVd9g51ZoGHuYUQOU=;
fh=FaZol9Uk6gnK+uGtcSFJW2nlQY6QrNwlPUIRM6Aafbo=;
b=Z0dy90w7wRy7Bq4JFawu0/LJ2h2dx1woVOV/zf1bvpsUwbX0EsoRC0PGUzgTNE5TcT
nhcpinDUZ04ZS9IBfuj9HbEIQ75gVwJ6QxacayZXDehOz/kPCfrQYmUwCeSm9pHhgEtP
dU1T9+esGdYrfL/G8Pmy3AmTdST2mvwpqzyBp1vEGQVw32wSvRMESY32sClB8zx9RG+Q
7A9cowAXX8fHdFi+EDRZzzFqVWyqZi+VdvwSB+oAjv32rDXw8m9fcSkndb67md6YSiWN
wIYcxnoEQqaMogAVNkMgsNzofkQTzIJgAYJV8IK4r9X7W3sEOJp7dqTd+2t6hmhDmGuG
/Fjg==;
dara=google.com
ARC-Authentication-Results: i=1; gmr-mx.google.com;
dkim=pass header.i=@gmail.com header.s=20230601 header.b=aU7o1JhD;
spf=pass (google.com: domain of bnagaev@gmail.com designates 2607:f8b0:4864:20::62d as permitted sender) smtp.mailfrom=bnagaev@gmail.com;
dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;
dara=pass header.i=@googlegroups.com
Received: from mail-pl1-x62d.google.com (mail-pl1-x62d.google.com. [2607:f8b0:4864:20::62d])
by gmr-mx.google.com with ESMTPS id d75a77b69052e-4a435745236si4994991cf.1.2025.06.03.14.27.24
for <bitcoindev@googlegroups.com>
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Tue, 03 Jun 2025 14:27:24 -0700 (PDT)
Received-SPF: pass (google.com: domain of bnagaev@gmail.com designates 2607:f8b0:4864:20::62d as permitted sender) client-ip=2607:f8b0:4864:20::62d;
Received: by mail-pl1-x62d.google.com with SMTP id d9443c01a7336-23035b3edf1so55797615ad.3
for <bitcoindev@googlegroups.com>; Tue, 03 Jun 2025 14:27:24 -0700 (PDT)
X-Gm-Gg: ASbGncvA/sCbmfmOlEErz2tSLyqmqBQD4QzSUT2X2AWjCvfujyFHK6zumDU/VwZYdhU
AIKH6pKBApH+O9cnz2SdGWsWw31B4JRa/Si2mFou4MX+kAQXzNe4VjZPVle18Q3sGZg5u7aRM/M
FqresZ856SJB2hgkcCATis/iMSUDDxoGg=
X-Received: by 2002:a17:902:d550:b0:224:1af1:87f4 with SMTP id
d9443c01a7336-235e14bc5d2mr3467875ad.22.1748986043681; Tue, 03 Jun 2025
14:27:23 -0700 (PDT)
MIME-Version: 1.0
References: <08dbeffd-64ec-4ade-b297-6d2cbeb5401c@achow101.com>
In-Reply-To: <08dbeffd-64ec-4ade-b297-6d2cbeb5401c@achow101.com>
From: Nagaev Boris <bnagaev@gmail.com>
Date: Tue, 3 Jun 2025 18:26:47 -0300
X-Gm-Features: AX0GCFt0w5A2qY8cTdMGvti6FQ1s92uQTPnTlrtzSslZI9EdtPVzYOIssa3sy-A
Message-ID: <CAFC_Vt5z+B+F=QOytZ96ptRFweX1aGBV-CXHqwv54UAyo_iiAw@mail.gmail.com>
Subject: Re: [bitcoindev] Allowing Duplicate Keys in BIP 390 musig() Expressions
To: Ava Chow <lists@achow101.com>
Cc: bitcoindev@googlegroups.com
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Original-Sender: bnagaev@gmail.com
X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass
header.i=@gmail.com header.s=20230601 header.b=aU7o1JhD; spf=pass
(google.com: domain of bnagaev@gmail.com designates 2607:f8b0:4864:20::62d as
permitted sender) smtp.mailfrom=bnagaev@gmail.com; dmarc=pass (p=NONE
sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=pass header.i=@googlegroups.com
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com
List-ID: <bitcoindev.googlegroups.com>
X-Google-Group-Id: 786775582512
List-Post: <https://groups.google.com/group/bitcoindev/post>, <mailto:bitcoindev@googlegroups.com>
List-Help: <https://groups.google.com/support/>, <mailto:bitcoindev+help@googlegroups.com>
List-Archive: <https://groups.google.com/group/bitcoindev
List-Subscribe: <https://groups.google.com/group/bitcoindev/subscribe>, <mailto:bitcoindev+subscribe@googlegroups.com>
List-Unsubscribe: <mailto:googlegroups-manage+786775582512+unsubscribe@googlegroups.com>,
<https://groups.google.com/group/bitcoindev/subscribe>
X-Spam-Score: -0.5 (/)
Hi Ava,
Is it safe to allow multiple participants to have the same public key?
If deterministic nonce generation is used (deriving each participant's
nonce from the message, the set of public keys, and the participant's
private key), duplicate public keys would lead to identical nonces.
While this may not be catastrophic (since they are signing the same
message and the private key likely can't be extracted) it still seems
risky. Identical nonces can have unexpected consequences, and I'm not
sure if all security assumptions would still hold.
Curious what you think.
Best,
Boris
On Tue, Jun 3, 2025 at 6:08=E2=80=AFPM 'Ava Chow' via Bitcoin Development
Mailing List <bitcoindev@googlegroups.com> wrote:
>
> Hi All,
>
> In implementing musig() descriptor expressions, I realized that the
> restriction "Repeated participant public keys are not allowed" is a bit
> complicated to implement. While I don't see why anyone would want to
> duplicate keys, MuSig2 does allow duplicate participant keys and
> allowing them would make the implementation of musig() expressions much
> easier. Thus I'd like to propose changing the BIP to remove this
> restriction.
>
> Has anyone implemented musig() expressions yet with this restriction,
> and would removing it be a significant breaking change to anyone? If
> not, I'll make the change to the BIP in a few days.
>
> Thanks,
>
> Ava
>
>
> --
> You received this message because you are subscribed to the Google Groups=
"Bitcoin Development Mailing List" group.
> To unsubscribe from this group and stop receiving emails from it, send an=
email to bitcoindev+unsubscribe@googlegroups.com.
> To view this discussion visit https://groups.google.com/d/msgid/bitcoinde=
v/08dbeffd-64ec-4ade-b297-6d2cbeb5401c%40achow101.com.
--=20
Best regards,
Boris Nagaev
--=20
You received this message because you are subscribed to the Google Groups "=
Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/=
CAFC_Vt5z%2BB%2BF%3DQOytZ96ptRFweX1aGBV-CXHqwv54UAyo_iiAw%40mail.gmail.com.
|
