From niftynei at gmail.com Wed Feb 12 23:09:17 2020 From: niftynei at gmail.com (lisa neigut) Date: Wed, 12 Feb 2020 17:09:17 -0600 Subject: [Lightning-dev] DRAFT: interactive tx construction protocol In-Reply-To: References: Message-ID: > Probably so that address reuse is not dinged, i.e. I have two UTXOs with the same address and want to make two different channels with different peers. Having 2 utxos locked to the same pubkey will map to a single H2 value though, which is what is used to flag utxo reuse. With a PoDLE you're proving that you have a *key* for a utxo; the verifier checks that the key you say you know does in fact map to controlling the utxo that you say it's attached to. Whether or not you added the utxo to the signature commitment doesn't add anything to the security of the verification. At worse, it might leak what other utxo that the initiator controls, if they accidentally commit to the wrong utxo and the peer decided to try grinding utxo outpoints on the offchance that one matched. On Tue, Feb 11, 2020 at 10:04 PM ZmnSCPxj wrote: > Good morning niftynei, and waxwing, and list, > > > > s = k + H(kG || kJ || P || P2 || utxo || receiving-node) x > > > > > and as before transfer opening: (P, P2, u, s, e) with receiving-node > implicitly reconstructed to do the verification of the Schnorr sig. It's > basically a message in a signature. > > > > Oh that's *much* nicer than calculating a second commitment. > Verification by any node that's not the intended recipient will fail, as > they'll use the wrong node_id (their own). > > > > It seems unnecessary to me to commit to the utxo, since the pubkey pair > effectively does that. What's the motivation for including it? > > Probably so that address reuse is not dinged, i.e. I have two UTXOs with > the same address and want to make two different channels with different > peers. > > While address reuse Is Bad, you might not have much control over some wog > who is supposed to pay you and decides to give you your money in two > separate UTXOs to the same address. > > Regards, > ZmnSCPxj > -------------- next part -------------- An HTML attachment was scrubbed... URL: