Feedback-ID: i525146e8:Fastmail
Date: Wed, 8 Nov 2023 02:06:23 +0000
From: Peter Todd <pete@petertodd.org>
To: Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Message-ID: <ZUrtHyQBOEZTM3Bj@petertodd.org>
References: <CALZpt+EZqfj=G=E37hA+k9pKYfvE0jkc3UU+H8sJVm=H3CO-JA@mail.gmail.com>
 <CALZpt+GXGBbo0JjOyMr3B-3dVY2Q_DuzF6Sn3xE5W24x77PRYg@mail.gmail.com>
 <ZUrbk9a9jiL87pxd@petertodd.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature"; boundary="9WGNm2G3b0rE/pXf"
Content-Disposition: inline
In-Reply-To: <ZUrbk9a9jiL87pxd@petertodd.org>
Cc: security@ariard.me, "lightning-dev\\\\@lists.linuxfoundation.org"
 <lightning-dev@lists.linuxfoundation.org>
Subject: Re: [bitcoin-dev] OP_Expire and Coinbase-Like Behavior: Making
 HTLCs Safer by Letting Transactions Expire Safely
Precedence: list


--9WGNm2G3b0rE/pXf
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Nov 08, 2023 at 12:51:31AM +0000, Peter Todd via bitcoin-dev wrote:
> > In a post-package relay world, I think this is possible. And that
> > replacement cycling attacks are breaking future dynamic fee-bumping of
> > pre-signed transactions concerns me a lot.
>=20
> Well the answer here is pretty clear: v3 package relay with anchors is br=
oken.

BTW a subtlety of this that may not be obvious is that in v3 package relay,
with zero value outputs, the outputs must be spent in the same package. Thus
_unlike_ existing anchor-using transactions, there would be only one anchor
output on the commitment transaction.

In existing anchor output transactions, this type of attack wouldn't work as
when broadcasting the transaction, Alice would be spending her anchor outpu=
t,
which Bob can't double spend. But that doesn't work in v3, which intends to
limit UTXO growth by requiring that anchors be spent in the same package. T=
hus
unlike existing anchor outputs, an anchor would be truly a OP_1 output with=
out
a signature, and thus belong to either Alice nor Bob uniquely.

--=20
https://petertodd.org 'peter'[:-1]@petertodd.org

--9WGNm2G3b0rE/pXf
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Dq80
-----END PGP SIGNATURE-----

--9WGNm2G3b0rE/pXf--