MIME-Version: 1.0
References: <CABT1wW=X35HRVGuP-BHUhDrkBEw27+-iDkNnHWjRU-1mRkn0JQ@mail.gmail.com>
In-Reply-To: <CABT1wW=X35HRVGuP-BHUhDrkBEw27+-iDkNnHWjRU-1mRkn0JQ@mail.gmail.com>
From: Stanga <stanga@gmail.com>
Date: Tue, 23 Jun 2020 09:41:56 +0300
Message-ID: <CABT1wW=KWtoo6zHs8=yUQ7vAYcFSdAzdpDJ9yfw6sJrLd6dN5A@mail.gmail.com>
To: Bitcoin Dev <bitcoin-dev@lists.linuxfoundation.org>
Content-Type: multipart/alternative; boundary="000000000000786dd405a8baa8c9"
Cc: Matan Yehieli <matany@campus.technion.ac.il>,
 Itay Tsabary <sitay@campus.technion.ac.il>
Subject: [bitcoin-dev] MAD-HTLC
Precedence: list

--000000000000786dd405a8baa8c9
Content-Type: text/plain; charset="UTF-8"

Hi all,

We'd like to bring to your attention our recent result concerning HTLC.
Here are the technical report and a short post outlining the main points:

* https://arxiv.org/abs/2006.12031
* https://ittayeyal.github.io/2020-06-22-mad-htlc

Essentially, we find that HTLC security relies on miners being altruistic,
or at least myopic. This might be enough for some time, but it took us 150
lines of code to make bitcoind non-myopic.

On the positive side, we discovered an alternative to HTLC that we call
MAD-HTLC, which is provably secure -- everyone's best interest is to behave
as desired.

We've notified relevant teams in advance.

We'll appreciate any comments.

Best,
Itay, Ittay, and Matan

--000000000000786dd405a8baa8c9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div class=3D"gmail_quote"><div dir=3D"ltr">Hi all, <br><b=
r>We&#39;d like to bring to your attention our recent result concerning HTL=
C. Here are the technical report and a short post outlining the main points=
: <br><br>* <a href=3D"https://arxiv.org/abs/2006.12031" target=3D"_blank">=
https://arxiv.org/abs/2006.12031</a> <br>* <a href=3D"https://ittayeyal.git=
hub.io/2020-06-22-mad-htlc" target=3D"_blank">https://ittayeyal.github.io/2=
020-06-22-mad-htlc</a> <br><br>Essentially, we find that HTLC security reli=
es on miners being altruistic, or at least myopic. This might be enough for=
 some time, but it took us 150 lines of code to make bitcoind non-myopic. <=
br><br>On the positive side, we discovered an alternative to HTLC that we c=
all MAD-HTLC, which is provably secure -- everyone&#39;s best interest is t=
o behave as desired. <br><br>We&#39;ve notified relevant teams in advance. =
<br><br>We&#39;ll appreciate any comments. <br><br>Best, <br>Itay, Ittay, a=
nd Matan=C2=A0<br><div><br></div></div>
</div></div>

--000000000000786dd405a8baa8c9--