Feedback-ID: i525146e8:Fastmail
Date: Tue, 7 Feb 2023 07:50:13 -0500
From: Peter Todd <pete@petertodd.org>
To: Nadav Ivgi <nadav@shesek.info>,
 Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Message-ID: <Y+JJBXsgJGSRZR29@petertodd.org>
References: <CAAQdECCH=YOcu4g6Ku1_G4CnRg6rsaFPFPwbABx9aZin9A8+2A@mail.gmail.com>
 <CAGXD5f3Bu3+BsbRQNcA=eugW7FDdgR0xQdpn66925b4DjRyJeQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature"; boundary="MANY8PoWM0q8mSt7"
Content-Disposition: inline
In-Reply-To: <CAGXD5f3Bu3+BsbRQNcA=eugW7FDdgR0xQdpn66925b4DjRyJeQ@mail.gmail.com>
Subject: Re: [bitcoin-dev] Unenforceable fee obligations in multiparty
 protocols with Taproot inputs
Precedence: list


--MANY8PoWM0q8mSt7
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Feb 07, 2023 at 11:36:58AM +0200, Nadav Ivgi via bitcoin-dev wrote:
> > Since Taproot (more generally any kind of MAST) spends have variable si=
ze
>=20
> Isn't this the case with any arbitrary script execution? Non-taproot

This is even been true for P2PKH inputs: you can double the space of your
scriptSigs by using uncompressed pubkeys instead of compressed pubkeys.

> If the goal is to only allow registering simple singlesig-encumbered UTXOs
> like P2(W)PKH, the participants could be asked to prove that their P2TR
> output commits to an unspendable script path [0].

Technically, only the last person to sign needs to prove this in advance.
Everyone else can prove it with their signatures.

This distinction could be useful to support coinjoin participants spending
complex P2TR outputs into coinjoins, a perfectly valid use-case in theory so
long as they're paying appropriate fees. Though due to how difficult it is =
to
validate scripts reliably outside the consensus code base, allowing this for
arbitrary scripts could lead to DoS attacks where someone takes advantage o=
f a
bug in script execution to create an invalid transaction.

--=20
https://petertodd.org 'peter'[:-1]@petertodd.org

--MANY8PoWM0q8mSt7
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE0RcYcKRzsEwFZ3N5Lly11TVRLzcFAmPiSQIACgkQLly11TVR
Lzcjaw//XFUHreT7uX9G+6yJ8Xiuomlo8qVcfkMnAXvGz+l7zA4R0xBXRlcTp/WW
3GvyfPnh5NnEf29ctCLiCqp+sWjcxtGjgXu0YD6YQtVtN62bS1rWKFYppqR/Ms7r
6SLH367T51l4JnpaxtfLtmVaBW6bDctBOF4PwEaCD/c5LYQyCQvanXezEYUVi6Tk
omjC1dmVn3XVQt1yEyJSfKR3PCe2Raf96SgdCxvFlB80Et8oMItCNYgca5/HlQtL
dNnvx9gYsXFhJc7RYoTz3OsoEJOA5DnW9JFDOVams1dXrrkR+HKMPiHsTrDkP0C9
Z9CpwgRYx1k7LyeJCc3xR6NFH444hTuxA9VcYKENFilDErVnLd9FcZ7azLLU49WP
gwBMFlEAxTEPP/d1G4W2jgiHvbrlI4LeUXoXTxLLh/s0Yel41s07qFgxZECbcgav
j9SbS7pnghfedfI3Z5KxSJ3qLYkSSZQ9Giw25YjpHIxHwHprXjY83yk0SI/fICp9
aanpXwsh6y+RNMQW6/PKMM55LJhrn8r/XK5zs+PsG+HbLei06PHp4QaKWnNlQxfM
NftYRSvZj0XgwFHHtZAKse4MWatTAQXThYs7zXu2MgeKzitAoFGfx+9Ktlr/MFjY
Kv4QlEadDK+lepT3vwjSP9x1b/X1u15q/d3COIggxat3prSC4NY=
=Be1P
-----END PGP SIGNATURE-----

--MANY8PoWM0q8mSt7--