Message-ID: <55F725FF.8030507@voskuil.org>
Date: Mon, 14 Sep 2015 12:54:39 -0700
From: Eric Voskuil <eric@voskuil.org>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
	rv:31.0) Gecko/20100101 Thunderbird/31.2.0
MIME-Version: 1.0
To: bitcoin-dev@lists.linuxfoundation.org, 
	Neill Miller <neillm@thecodefactory.org>
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
	boundary="NBPV5JhMDTQuuo2qpaVGtjuW4ceOWaL6K"
Subject: [bitcoin-dev] BIP-38 issue and altchain support
Precedence: list

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--NBPV5JhMDTQuuo2qpaVGtjuW4ceOWaL6K
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

In the integration of BIP-38 into libbitcoin we ran into two issues.

First, the scenario that justifies the "confirmation code" is flawed. We
have implemented full support for this, but have also marked it as
deprecated.

I am seeking counter arguments, in case there is some scenario that we
haven't imagined where it might be useful. Details here:

[TLDR: the confirmation code cannot prove anything about the owner's
ability to spend from the public-key/address that it confirms.]

https://github.com/libbitcoin/libbitcoin/wiki/BIP38-Security-Consideratio=
ns

Second, BIP-38 envisions altchain integration but doesn't specify it. We
have implemented the capability, documented here:

[TLDR: incorporate the payment address version into the last byte of the
encoded encrypted key prefixes, with backward compatibility]

https://github.com/libbitcoin/libbitcoin/wiki/Altchain-Encrypted-Private-=
Keys

If there is sufficient support I'll write up a Proposal that modifies
BIP-38.

Thanks to Neill Miller for the libbitcoin and bx BIP-38 pull requests.

e


--NBPV5JhMDTQuuo2qpaVGtjuW4ceOWaL6K
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJV9yX/AAoJEDzYwH8LXOFOapkH/2cbJMCKI6iSMPIPzPT5Iuou
qbEUPQvQowk1I6nFhN3mkBb9OmVM6yqEnbsi31HHs1m3Fwci9A1+KzNpuw+xRTIB
PYRcJ/EfBrwWYhUgWPPVzoAp4UPBOffOKJKaWS6YaxAjuWd/RQAWg/7TQf8IPklV
aZ0op5mjOWuf6xw1I0fQoZJVwAIZN3rH4ekBLBEUKRLQlwMMNNkXKknQ1M2hLkXY
D1ds89Aln1XAOPiOQGYdXEpL/eG8dZb0MKiznO3hSwVZTu1EX/TxElbSsBLWdX7B
/1x6Jzhf7IWvei0aLjycKCAuM+FslvFje0eEdSLpyxfElbbqj83sw/WkH015ONA=
=5r8m
-----END PGP SIGNATURE-----

--NBPV5JhMDTQuuo2qpaVGtjuW4ceOWaL6K--