summaryrefslogtreecommitdiff
path: root/9a/08fe0c8ab4870646a2dc1f4698339560187d44
blob: 7269192c9fc1b53af40d1a9f73c1a7b28548e486 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
Delivery-date: Thu, 27 Mar 2025 05:19:38 -0700
Received: from mail-ot1-f64.google.com ([209.85.210.64])
	by mail.fairlystable.org with esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.94.2)
	(envelope-from <bitcoindev+bncBDML5DFJWQEBBT4ESW7QMGQERRKTGOY@googlegroups.com>)
	id 1txmCv-0001O6-EV
	for bitcoindev@gnusha.org; Thu, 27 Mar 2025 05:19:38 -0700
Received: by mail-ot1-f64.google.com with SMTP id 46e09a7af769-727405aff47sf1103301a34.1
        for <bitcoindev@gnusha.org>; Thu, 27 Mar 2025 05:19:37 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1743077971; cv=pass;
        d=google.com; s=arc-20240605;
        b=FtbGMsA9QgvwSbHGTUUOycUcqxl0T9doRSrjDpNur4ZX19TXuyiQ62nknFyBcxNrny
         oBIj4wKu8RhyPQtldi3DGuiFow48iC3402Dmr/INng+xW0ZeVXlinRYkFSFCw9IrhT7N
         1q+tMzXnvOrl9yNIFNuQUmzqaO1loPXK0aw5YwPzSOjZ8sAUK40DFvCTv+3MYOp4xs2g
         +VFRs9pmWzmdNQFzxnQ9RZDpt5nkYdr5POzQxKNPFtZkETBy7gsrxQ1eZM2Rdko3pBx6
         uwOZCdIwGomq8X0fTk+JbVCF9cOHn7UmRNpyHIvryrJOQjxcO0W50gRr3eYk9Dg8h0UB
         uuEQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:cc:to:subject:message-id:date:from
         :in-reply-to:references:mime-version:sender:dkim-signature
         :dkim-signature;
        bh=+IXxK5bYhifolIZe4Odb3z8H+reCEbO2VqkIu8LcTPQ=;
        fh=fbVxeOGaZD1bLdL8rCx7FF6tpXIS1v3CbF0nZCakVEc=;
        b=IgVt0iLqTtqEIXsQv7pFEf/tfzfez793OpzVdOZy8pj261CF2/jUW6UAlbY2i/mz12
         IKQ7/+OTD2tHjIcwjoHOIvA2eGWuCqLiOW/XQRon2g/T7cYbpDw/e2GiY1Fl4y6sZczv
         bfWqDImxy3sYLH0dBIz0H3QF+UpdDN928m7Zk/4x0iuagyMhMs1BolPIhatPdq3dX8fr
         9Ofn+yZWyoqxf2MAS5YoYGgRanF9wocDZWVdnvq6sFlEXQls9t9yKs9w4juW4kmtfcv4
         ZUVNAMiOIXg6d0ckYSbtviGKgamFp89gqg6MreJU3YaR0WqZG80GaJLDI8jiKsnxmqFw
         tDCg==;
        darn=gnusha.org
ARC-Authentication-Results: i=2; gmr-mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20230601 header.b=DR8i2H0E;
       spf=pass (google.com: domain of stewart.chris1234@gmail.com designates 2607:f8b0:4864:20::1134 as permitted sender) smtp.mailfrom=stewart.chris1234@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;
       dara=pass header.i=@googlegroups.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=googlegroups.com; s=20230601; t=1743077971; x=1743682771; darn=gnusha.org;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:cc:to:subject:message-id:date:from:in-reply-to
         :references:mime-version:sender:from:to:cc:subject:date:message-id
         :reply-to;
        bh=+IXxK5bYhifolIZe4Odb3z8H+reCEbO2VqkIu8LcTPQ=;
        b=xrw0vyTUfZGmfsseOcRmr2KOK2gpy2sForfoIZYKsXr7TfU/quxzFwykczUYeLMeZU
         CERxbrTSv3nW9VXEFrQA7r04gZFHjGAKqKSrDYXaYOKAdBGef9rEdSk1WSa81TziRB53
         9+pTWEzFQaFWM+UoVnoqm348vK8P2hy3PTkbRzQrV6oYbVX9s8Gd6unfaKXy7BkNqNZC
         h08C5HmkBXhpbjh37ImJWM3pB40CuE2gfOaDGWHfNc8AwMlKkoYYyeHxKIwPN4f2kCiM
         uZ1quHh3jciv8W36ldppQSBAWXKiGHtOH4RAD/TOUN4dM600TloHbho9/SAmb33Eazis
         FoSg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20230601; t=1743077971; x=1743682771; darn=gnusha.org;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:cc:to:subject:message-id:date:from:in-reply-to
         :references:mime-version:from:to:cc:subject:date:message-id:reply-to;
        bh=+IXxK5bYhifolIZe4Odb3z8H+reCEbO2VqkIu8LcTPQ=;
        b=RkcabcHilaJAAvvdr0UlLFa5XGC/mYGJ0y9G634kSvGhC1Q5ccfM1qySJ6rGPIXvxn
         JY/4O8dypAdsRVhrjvocXtP87FSDfy5CXr1Ys+RQ1Uck2douiOxfTyT52PtZft3zkUnk
         IMjtLjjeLst2YbqtnripWQSmYwtU1gqFmY7OUfPsSSliOfkfijuMNfnjYFxgirIbDCDV
         42n3mNP4+hqpEV91RCpDWVtvf6TBV2MUiIUXJDiFXTh1oi0oVCFUXR4zhQrliiVOQ0tz
         2SaQh1BOR9IRc8rkOl6N3c8PL/TMn3FrAP9Fa783F/yV8A1aBZ0Nodd061V1SAlnom8/
         jqaQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20230601; t=1743077971; x=1743682771;
        h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
         :list-id:mailing-list:precedence:x-original-authentication-results
         :x-original-sender:cc:to:subject:message-id:date:from:in-reply-to
         :references:mime-version:x-beenthere:x-gm-message-state:sender:from
         :to:cc:subject:date:message-id:reply-to;
        bh=+IXxK5bYhifolIZe4Odb3z8H+reCEbO2VqkIu8LcTPQ=;
        b=P/26mmIfz1ywCkujv/qe+h0h+jZ41ew6BoFogDHcCt3QNXCrWmMsAT3JyVU8kIP5hD
         9eqtYkLpAdqO7hE7PgUDwHh0v6BSuJCv4ltpJJ2BrkVom7yTnyqV61QbNFn7zKhZyWqh
         zgL78a3igKk1mOl3ve2p8ERfJU/10pz3yPJWA7nJvnhwS1RChfdKKBiyEL/Ue0od9VY1
         VUkn4L6cAi4TdQEZ2I8wYksDyOI5ZB8GD3iIHQSNTUptJV6a/oSDsMk1b1m+Oitu9Qel
         GWriFyzeExa0O07u/QgdXElC5VUFzP2QXXE4yxlKndQcXvMmc+TUedKILSFIQBq0k6g6
         De9w==
Sender: bitcoindev@googlegroups.com
X-Forwarded-Encrypted: i=2; AJvYcCWZ2hfotgCpFfTBzP6KMZop5QdFYStPLlNZlhBdXjHJJQFjpM+mbqiFJDqppPrfmN8b0RIxoEvjKz6x@gnusha.org
X-Gm-Message-State: AOJu0YyzzfRqLQuE+pVWNXbWbGGVo58VhaATE5GEsy+PhB/gKc2r51gu
	yubCt99acxv0HHYbuJG0I8ueJM8CZHf3nzxdM1Si6Ep+aTZAWgzC
X-Google-Smtp-Source: AGHT+IGbsHJGZ6Zb6v/E88P9Ue5LN12uXkBme7PfsQDdqhQfqf8q1RMASwWu1Zl3npUYqwZpuCKNMA==
X-Received: by 2002:a05:6830:43a4:b0:72a:47ec:12da with SMTP id 46e09a7af769-72c4c9730e4mr2598763a34.10.1743077970635;
        Thu, 27 Mar 2025 05:19:30 -0700 (PDT)
X-BeenThere: bitcoindev@googlegroups.com; h=ARLLPAJLzPLMPIT60Z/YEz/q8D9w26dShqehcSYZVCAWM3Rmpg==
Received: by 2002:a4a:ddc7:0:b0:602:6b9f:26fa with SMTP id 006d021491bc7-60278db55e9ls309261eaf.0.-pod-prod-09-us;
 Thu, 27 Mar 2025 05:19:26 -0700 (PDT)
X-Received: by 2002:a05:6808:1a1b:b0:3fe:aebe:d60d with SMTP id 5614622812f47-3fefa546f6bmr2349247b6e.21.1743077966829;
        Thu, 27 Mar 2025 05:19:26 -0700 (PDT)
Received: by 2002:a05:6808:2797:b0:3f6:a384:eb6f with SMTP id 5614622812f47-3feef8f0f2dmsb6e;
        Thu, 27 Mar 2025 03:47:05 -0700 (PDT)
X-Received: by 2002:a17:90b:28d0:b0:2ee:7c65:ae8e with SMTP id 98e67ed59e1d1-303a7d6a149mr5394219a91.11.1743072424547;
        Thu, 27 Mar 2025 03:47:04 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1743072424; cv=none;
        d=google.com; s=arc-20240605;
        b=NShNuApJamVR9Pls6PgiuZzvU1cbUWlzOLEaZAjUOOCiMlOIsmWqIEtlqRRrUND6O3
         69v5nM2IAMLZSLbkNlLtzqzhs0CLMc3QnwT6CQARXy14jX0ddcJ0l0cxhKofauUNgay6
         shkti/HIuJNxYC9nFKeIlnUoccbFiF8uGf63MVvlV1YLHib3kweqAs57nHyLPVSE8oDh
         8neCt6k1bLSNLykVXCiOwS2csLZ6WnBtpwe+h8t3FrRQlkGfl++tAi4+wDa4pzm1EXRQ
         SZqLfhOcTnOsIVA74KvSQbA2XtRwwQ5LRfuePh/yqdt5X1EwUqPL0JGvJb7tCCkB19fv
         OSjA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
        h=cc:to:subject:message-id:date:from:in-reply-to:references
         :mime-version:dkim-signature;
        bh=vDfZFLhhFr2nB4RinoSjgD+msWsXyyIgakIKcyelkac=;
        fh=m2IwlnuMmP6ceRgqI8U7RCh8Dkd3VeWlWEfxse0Wcvc=;
        b=Tdf2ULBmj17qhv+Mbeb5/h+2h1bYKWMPSAOxdLGRF4BDBjCQZ0/xMbhNcBaxpy10jT
         cEa428JJvX3IxZAiW+H4R/G5V0ry7N5YXjI8r2l/lT1uquWsC5y7k2XeppihdsYTtN3k
         6ggaxxxSkWUZmrjx2Hvr1Wmjn3ReBewGkylKFKKsXe2utVd5/tsSjBaS7PtwCCJuZlWO
         MRmQcQ9+5IhpyMWwaIFj+Nce+D75aedT2nk0M4zvY160JcqQwFV3xIj3f9OvP49aIJg9
         lPhrB18Oy6GT2huZVOW6DX+63myp2JOOQK3cAsisCWriRhHPfifJOdHt2t+GTRxZC8Q6
         znMQ==;
        dara=google.com
ARC-Authentication-Results: i=1; gmr-mx.google.com;
       dkim=pass header.i=@gmail.com header.s=20230601 header.b=DR8i2H0E;
       spf=pass (google.com: domain of stewart.chris1234@gmail.com designates 2607:f8b0:4864:20::1134 as permitted sender) smtp.mailfrom=stewart.chris1234@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;
       dara=pass header.i=@googlegroups.com
Received: from mail-yw1-x1134.google.com (mail-yw1-x1134.google.com. [2607:f8b0:4864:20::1134])
        by gmr-mx.google.com with ESMTPS id 98e67ed59e1d1-3037c8f031fsi263010a91.0.2025.03.27.03.47.04
        for <bitcoindev@googlegroups.com>
        (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
        Thu, 27 Mar 2025 03:47:04 -0700 (PDT)
Received-SPF: pass (google.com: domain of stewart.chris1234@gmail.com designates 2607:f8b0:4864:20::1134 as permitted sender) client-ip=2607:f8b0:4864:20::1134;
Received: by mail-yw1-x1134.google.com with SMTP id 00721157ae682-6efe4e3d698so7962157b3.0
        for <bitcoindev@googlegroups.com>; Thu, 27 Mar 2025 03:47:04 -0700 (PDT)
X-Gm-Gg: ASbGnctKAo05OZuolvJ2rZtXayHr6AotUGu9NW878M1OkYZRs+kx8MroCL4Os9XEBLJ
	2cr2kLQMV+mmcdRSn/aOKiiPfOCdm5Q0gNbbqPeJH1xhY2F0R2k1hyTYDTG6/E6g/LfJmCpesAD
	y351FZG3E9S+EiNPJuws32DqkimA==
X-Received: by 2002:a05:690c:640e:b0:6fb:1c5a:80f8 with SMTP id
 00721157ae682-70224fcb6ecmr44526057b3.15.1743072423870; Thu, 27 Mar 2025
 03:47:03 -0700 (PDT)
MIME-Version: 1.0
References: <uDAujRxk4oWnEGYX9lBD3e0V7a4V4Pd-c4-2QVybSZNcfJj5a6IbO6fCM_xEQEpBvQeOT8eIi1r91iKFIveeLIxfNMzDys77HUcbl7Zne4g=@protonmail.com>
In-Reply-To: <uDAujRxk4oWnEGYX9lBD3e0V7a4V4Pd-c4-2QVybSZNcfJj5a6IbO6fCM_xEQEpBvQeOT8eIi1r91iKFIveeLIxfNMzDys77HUcbl7Zne4g=@protonmail.com>
From: Chris Stewart <stewart.chris1234@gmail.com>
Date: Thu, 27 Mar 2025 05:46:52 -0500
X-Gm-Features: AQ5f1JpSSb1IeHRwvcXK170yQdNGXI13E6rXmtv3j_iH3SKTG9FDGGLrX4hqdRo
Message-ID: <CAGL6+mFQqTS21cQZ_aU=hXtMaKkw5ygAk2PT9hQpdB4THz9X_A@mail.gmail.com>
Subject: Re: [bitcoindev] Consensus Cleanup BIP draft
To: Antoine Poinsot <darosior@protonmail.com>
Cc: Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
Content-Type: multipart/alternative; boundary="000000000000a488c4063150acd7"
X-Original-Sender: stewart.chris1234@gmail.com
X-Original-Authentication-Results: gmr-mx.google.com;       dkim=pass
 header.i=@gmail.com header.s=20230601 header.b=DR8i2H0E;       spf=pass
 (google.com: domain of stewart.chris1234@gmail.com designates
 2607:f8b0:4864:20::1134 as permitted sender) smtp.mailfrom=stewart.chris1234@gmail.com;
       dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;
       dara=pass header.i=@googlegroups.com
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com
List-ID: <bitcoindev.googlegroups.com>
X-Google-Group-Id: 786775582512
List-Post: <https://groups.google.com/group/bitcoindev/post>, <mailto:bitcoindev@googlegroups.com>
List-Help: <https://groups.google.com/support/>, <mailto:bitcoindev+help@googlegroups.com>
List-Archive: <https://groups.google.com/group/bitcoindev
List-Subscribe: <https://groups.google.com/group/bitcoindev/subscribe>, <mailto:bitcoindev+subscribe@googlegroups.com>
List-Unsubscribe: <mailto:googlegroups-manage+786775582512+unsubscribe@googlegroups.com>,
 <https://groups.google.com/group/bitcoindev/subscribe>
X-Spam-Score: -0.5 (/)

--000000000000a488c4063150acd7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Antoine,

First off, concept ACK. My concerns are procedural rather than objections
to the individual security fixes themselves.

The "Great Consensus Cleanup" is a fantastic brand for communicating these
protocol changes to non-technical users. However, since this is a technical
forum and we are producing BIPs intended for technical audiences, I believe
we should document these changes in separate BIPs.

The proposed security fixes are largely unrelated from a technical
standpoint:

   1.

   Timewarp attack mitigation
   2.

   Worst-case block validation constraints
   3.

   Disallowing 64-byte transactions
   4.

   Avoiding duplicate transactions

We should absolutely retain the "Great Consensus Cleanup" branding while
independently documenting each security enhancement.

A common concern I=E2=80=99ve heard about splitting this BIP is that deploy=
ing soft
forks is difficult, so all changes should be bundled together. While soft
fork deployment is indeed challenging, we've successfully activated
multiple BIPs within a single soft fork in the past=E2=80=94e.g., BIP141 an=
d BIP143
in Segwit, as well as BIP341, BIP342, and BIP343 in Taproot. If the
community reaches consensus, we can still deploy all these changes
together, even if they are documented separately.

This approach also provides flexibility: if one of the proposed changes
turns out to be controversial, we could remove it without holding up the
rest of the improvements. Additionally, once these fixes are deployed,
there will likely be significant research and documentation to incorporate,
and maintaining independent BIPs will make it easier to manage that growth.

I do see merit in implementing all the security fixes in a single PR for
Bitcoin Core. More active contributors to the project may have stronger
opinions on the best approach there.

-Chris
------------------------------




On Wed, Mar 26, 2025 at 1:23=E2=80=AFPM 'Antoine Poinsot' via Bitcoin Devel=
opment
Mailing List <bitcoindev@googlegroups.com> wrote:

> Hi everyone,
>
> About two months ago i shared an update on this list about my (and
> others', really) work on the
> Consensus Cleanup [0]. I am now ready to share a BIP draft for a Consensu=
s
> Cleanup soft fork.
>
> The BIP draft can be found here:
> https://github.com/darosior/bips/blob/consensus_cleanup/bip-cc.md
>
> It includes the following fixes:
> - a restriction on the timestamp of the first and last blocks of a
> difficulty adjustment period to
>   address the Timewarp and Murch-Zawy attacks;
> - a limit on the number of legacy signature operations that may be
> executed in validating a single
>   transaction to address long block validation times;
> - making 64 bytes transactions invalid to address weaknesses in the block
> Merkle tree construction;
> - mandating coinbase transactions be timelocked to their block height to
> prevent future transaction
>   duplication without resorting to BIP30 validation.
>
> This BIP draws on the 2019 Great Consensus Cleanup proposal from Matt
> Corallo [1]. A number of
> people contributed ideas, testing, data or useful discussions. This
> includes Ava Chow, Matt Corallo,
> Mark Erhardt, Brian Groll, David A. Harding, Sjors Provoost, Anthony
> Towns, Greg Sanders, Chris
> Stewart, Eric Voskuil, @0xb10c and others.
>
> Antoine Poinsot
>
> [0]
> https://gnusha.org/pi/bitcoindev/jiyMlvTX8BnG71f75SqChQZxyhZDQ65kldcugeID=
JVJsvK4hadCO3GT46xFc7_cUlWdmOCG0B_WIz0HAO5ZugqYTuX5qxnNLRBn3MopuATI=3D@prot=
onmail.com
> [1]
> https://github.com/TheBlueMatt/bips/blob/7f9670b643b7c943a0cc6d2197d3eabe=
661050c2/bip-XXXX.mediawiki
>
> --
> You received this message because you are subscribed to the Google Groups
> "Bitcoin Development Mailing List" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to bitcoindev+unsubscribe@googlegroups.com.
> To view this discussion visit
> https://groups.google.com/d/msgid/bitcoindev/uDAujRxk4oWnEGYX9lBD3e0V7a4V=
4Pd-c4-2QVybSZNcfJj5a6IbO6fCM_xEQEpBvQeOT8eIi1r91iKFIveeLIxfNMzDys77HUcbl7Z=
ne4g%3D%40protonmail.com
> .
>

--=20
You received this message because you are subscribed to the Google Groups "=
Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/=
CAGL6%2BmFQqTS21cQZ_aU%3DhXtMaKkw5ygAk2PT9hQpdB4THz9X_A%40mail.gmail.com.

--000000000000a488c4063150acd7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div><div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr">Hi=
 Antoine,
<p>First off, concept ACK. My concerns are procedural rather than objection=
s to the individual security fixes themselves.</p>
<p>The &quot;Great Consensus Cleanup&quot; is a fantastic brand for communi=
cating these protocol changes to non-technical users. However, since this i=
s a technical forum and we are producing BIPs intended for technical audien=
ces, I believe we should document these changes in separate BIPs.</p>
<p>The proposed security fixes are largely unrelated from a technical stand=
point:</p>
<ol><li>
<p>Timewarp attack mitigation</p>
</li><li>
<p>Worst-case block validation constraints</p>
</li><li>
<p>Disallowing 64-byte transactions</p>
</li><li>
<p>Avoiding duplicate transactions</p>
</li></ol>
<p>We should absolutely retain the &quot;Great Consensus Cleanup&quot; bran=
ding while independently documenting each security enhancement.</p>
<p>A common concern I=E2=80=99ve heard about splitting this BIP is that dep=
loying soft forks is difficult, so all changes should be bundled together. =
While soft fork deployment is indeed challenging, we&#39;ve successfully ac=
tivated multiple BIPs within a single soft fork in the past=E2=80=94e.g., B=
IP141 and BIP143 in Segwit, as well as BIP341, BIP342, and BIP343 in Taproo=
t. If the community reaches consensus, we can still deploy all these change=
s together, even if they are documented separately.</p>
<p>This approach also provides flexibility: if one of the proposed changes =
turns out to be controversial, we could remove it without holding up the re=
st of the improvements. Additionally, once these fixes are deployed, there =
will likely be significant research and documentation to incorporate, and m=
aintaining independent BIPs will make it easier to manage that growth.</p>
<p>I do see merit in implementing all the security fixes in a single PR for=
 Bitcoin Core. More active contributors to the project may have stronger op=
inions on the best approach there.<br><br></p><p>-Chris <br></p><hr><div><b=
r></div><div><br></div><div><br></div></div></div></div></div></div><div><d=
iv dir=3D"ltr"><div dir=3D"ltr"><div dir=3D"ltr"><br><div class=3D"gmail_qu=
ote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Mar 26, 2025 at 1:23=E2=
=80=AFPM &#39;Antoine Poinsot&#39; via Bitcoin Development Mailing List &lt=
;<a href=3D"mailto:bitcoindev@googlegroups.com" target=3D"_blank">bitcoinde=
v@googlegroups.com</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote=
" style=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style=
:solid;padding-left:1ex;border-left-color:rgb(204,204,204)">Hi everyone,<br=
>
<br>
About two months ago i shared an update on this list about my (and others&#=
39;, really) work on the<br>
Consensus Cleanup [0]. I am now ready to share a BIP draft for a Consensus =
Cleanup soft fork.<br>
<br>
The BIP draft can be found here: <a href=3D"https://github.com/darosior/bip=
s/blob/consensus_cleanup/bip-cc.md" rel=3D"noreferrer" target=3D"_blank">ht=
tps://github.com/darosior/bips/blob/consensus_cleanup/bip-cc.md</a><br>
<br>
It includes the following fixes:<br>
- a restriction on the timestamp of the first and last blocks of a difficul=
ty adjustment period to<br>
=C2=A0 address the Timewarp and Murch-Zawy attacks;<br>
- a limit on the number of legacy signature operations that may be executed=
 in validating a single<br>
=C2=A0 transaction to address long block validation times;<br>
- making 64 bytes transactions invalid to address weaknesses in the block M=
erkle tree construction;<br>
- mandating coinbase transactions be timelocked to their block height to pr=
event future transaction<br>
=C2=A0 duplication without resorting to BIP30 validation.<br>
<br>
This BIP draws on the 2019 Great Consensus Cleanup proposal from Matt Coral=
lo [1]. A number of<br>
people contributed ideas, testing, data or useful discussions. This include=
s Ava Chow, Matt Corallo,<br>
Mark Erhardt, Brian Groll, David A. Harding, Sjors Provoost, Anthony Towns,=
 Greg Sanders, Chris<br>
Stewart, Eric Voskuil, @0xb10c and others.<br>
<br>
Antoine Poinsot<br>
<br>
[0] <a href=3D"https://gnusha.org/pi/bitcoindev/jiyMlvTX8BnG71f75SqChQZxyhZ=
DQ65kldcugeIDJVJsvK4hadCO3GT46xFc7_cUlWdmOCG0B_WIz0HAO5ZugqYTuX5qxnNLRBn3Mo=
puATI=3D@protonmail.com" rel=3D"noreferrer" target=3D"_blank">https://gnush=
a.org/pi/bitcoindev/jiyMlvTX8BnG71f75SqChQZxyhZDQ65kldcugeIDJVJsvK4hadCO3GT=
46xFc7_cUlWdmOCG0B_WIz0HAO5ZugqYTuX5qxnNLRBn3MopuATI=3D@protonmail.com</a><=
br>
[1] <a href=3D"https://github.com/TheBlueMatt/bips/blob/7f9670b643b7c943a0c=
c6d2197d3eabe661050c2/bip-XXXX.mediawiki" rel=3D"noreferrer" target=3D"_bla=
nk">https://github.com/TheBlueMatt/bips/blob/7f9670b643b7c943a0cc6d2197d3ea=
be661050c2/bip-XXXX.mediawiki</a><br>
<br>
-- <br>
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List&quot; group.<br>
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev%2Bunsubscribe@googlegroups.com" target=
=3D"_blank">bitcoindev+unsubscribe@googlegroups.com</a>.<br>
To view this discussion visit <a href=3D"https://groups.google.com/d/msgid/=
bitcoindev/uDAujRxk4oWnEGYX9lBD3e0V7a4V4Pd-c4-2QVybSZNcfJj5a6IbO6fCM_xEQEpB=
vQeOT8eIi1r91iKFIveeLIxfNMzDys77HUcbl7Zne4g%3D%40protonmail.com" rel=3D"nor=
eferrer" target=3D"_blank">https://groups.google.com/d/msgid/bitcoindev/uDA=
ujRxk4oWnEGYX9lBD3e0V7a4V4Pd-c4-2QVybSZNcfJj5a6IbO6fCM_xEQEpBvQeOT8eIi1r91i=
KFIveeLIxfNMzDys77HUcbl7Zne4g%3D%40protonmail.com</a>.<br>
</blockquote></div></div>
</div>
</div>
</div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev+unsubscribe@googlegroups.com">bitcoind=
ev+unsubscribe@googlegroups.com</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/d/msgid/=
bitcoindev/CAGL6%2BmFQqTS21cQZ_aU%3DhXtMaKkw5ygAk2PT9hQpdB4THz9X_A%40mail.g=
mail.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/=
d/msgid/bitcoindev/CAGL6%2BmFQqTS21cQZ_aU%3DhXtMaKkw5ygAk2PT9hQpdB4THz9X_A%=
40mail.gmail.com</a>.<br />

--000000000000a488c4063150acd7--