1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
|
Delivery-date: Thu, 06 Feb 2025 13:46:50 -0800
Received: from mail-qt1-f190.google.com ([209.85.160.190])
by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.94.2)
(envelope-from <bitcoindev+bncBCBOPKOL54MRBP63SS6QMGQEDKQY2SI@googlegroups.com>)
id 1tg9hx-0000HS-Ue
for bitcoindev@gnusha.org; Thu, 06 Feb 2025 13:46:50 -0800
Received: by mail-qt1-f190.google.com with SMTP id d75a77b69052e-467a3c0c8f6sf27737241cf.0
for <bitcoindev@gnusha.org>; Thu, 06 Feb 2025 13:46:48 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; t=1738878402; cv=pass;
d=google.com; s=arc-20240605;
b=Iizn4K9kmUgrAbMJjKttX3c80bOm0tv7V87t4/y+pVymsExXaHndzp8bWtb222/C+w
arhgO7nTbHHChcgKsaKNKOHgJzj2rYNy+7ENBfWMtv5QPj2v47H/CuIVrmLTgtZVheUs
1kOqBm+ckVpVb+QAonrkGhB7aAQ4+JaTJFN1OPXRdjjdvBjwbIJBb+BhJ2m71Gzg/muc
nPIv2WBFuu++0Cctc0kk4gTV0pHKc2tccBe1rPpgnlIgUpOPNR6bE4Zec+z5q9Zyuz34
x0vi8y2fKUesS6l3osR3Ut0wGniVsLBSAaRvgCpaH/fHOMRj3803knq69Y5GNY+w3px8
rOug==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:in-reply-to:from:content-language
:references:to:subject:user-agent:mime-version:date:message-id
:sender:dkim-signature;
bh=d0hSeIpTmFzA7rKmJo+RYt9a5se0Z6DRm1dAaj0zpG4=;
fh=OZU8RPXtZh7LOvhaB6ZCMS0xX8OkrM+BrPSK8GOcPX8=;
b=Hz130NEFaCmGdk0+7aC0nw1WtAXzTXh4YDpT7Ym70oHrq7vImM5ka6thVYeaNLg6oM
YyslNLavIomPVGFkuFctgjg04gW+iLnnNH8qSV3Qn3C62fAhqThfjaYm2g2TRXNGytLG
DSit+gJDWpDaMGs4P5piSlbfLDuVYURdJcF9gwKA8LhezGiesJ8xTgiGYlvor5PtcyJQ
ibxRWu0OeOJIdqqDRzGCwzD2OMZQ3kjY/C+xIIekY/AigaKMSXG7/Wv3L1qyRZEn+jrW
N6xttyhfNeDwJnJuuMmf32jsAcKqnTZgtUEMmSnqTFPaMte88ITjfvgtQtbsY38oX6jA
tjlQ==;
darn=gnusha.org
ARC-Authentication-Results: i=2; gmr-mx.google.com;
dkim=pass header.i=@murch.one header.s=uberspace header.b=s3A8Co1i;
spf=pass (google.com: domain of murch@murch.one designates 2a00:d0c0:200:0:1c7b:a6ff:fee0:8ea4 as permitted sender) smtp.mailfrom=murch@murch.one
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlegroups.com; s=20230601; t=1738878402; x=1739483202; darn=gnusha.org;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-authentication-results
:x-original-sender:in-reply-to:from:content-language:references:to
:subject:user-agent:mime-version:date:message-id:sender:from:to:cc
:subject:date:message-id:reply-to;
bh=d0hSeIpTmFzA7rKmJo+RYt9a5se0Z6DRm1dAaj0zpG4=;
b=ReWExFAtCjjaREFJl8Yo6bq+9eB4drCrZ8m38EbXEvKvKAUWkwm6mVnyaqAvqFSuh0
RFys8AHhTWOHJdtrv8HH4iZXNVBL4L0p3+pXc1B2dzYMTMQYsVU9RIdzZAlfyVJL9mXd
tFRYsgWInWqMfy2FHcaJGEXazyzHwnzJtPkiOosJWfSXjVk7CJ9nUwl2mduW7fcIB/C+
dJNZTy/bhRspb/ZAf3nVSzggwmVDPveRDIbqDw6BHL1ekbisv75bTVVLcICYLaRa6+UW
ubN55NwtKxMDQpEWAJn4kgBjj56bAgQjo6DiTT5Z7QhBbBa+45uyaV1GgzTKTTQqj9Im
8PIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1738878402; x=1739483202;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-authentication-results
:x-original-sender:in-reply-to:from:content-language:references:to
:subject:user-agent:mime-version:date:message-id:x-beenthere
:x-gm-message-state:sender:from:to:cc:subject:date:message-id
:reply-to;
bh=d0hSeIpTmFzA7rKmJo+RYt9a5se0Z6DRm1dAaj0zpG4=;
b=Hvmw0DEtX9wm1m59WTnRuQzvZOntygnmvDQLznhC/z5e0Hh6aX+iUaNPInvRbfwBWE
v/3Hcd7GN9VM+ba01IVSP03b3Nk8c9iQk1FftUif734OgfZsvw0gQZNpvi2js0df9bOo
l3T1/+tgq/pG8CRajMneJRUzc7KyXdwAS644IuXKlTfT+RNc6VAHz/GLdrPmXxDNbgq1
ufg+xIYain0lAex1L3BAGJYaNCy4PZu6XEc4fpwRC325IEcLpcLXL9/WXFncROXB9CU3
9DLsscsUKh8ee55CEqU0gEpBsyNFlr6DZoCPzXYq9cTKakPxJELI+R/zzlEkTy7pQLPi
cZxg==
Sender: bitcoindev@googlegroups.com
X-Forwarded-Encrypted: i=2; AJvYcCUUs7sSbO+nv/bHmnm5jU6Xo9chugMC5PmQuPOefn4Ad6V/QepsDrSUK3FptawTIYjXSLGb2qRW/QXH@gnusha.org
X-Gm-Message-State: AOJu0Yzia/m4dRWf5UcHv6P4nEfM9dDw+lyYOA8U7hd6eLe5xLtVDD0p
qo+PiqIvwJsurbcwvapBP9pnDTsp0YthaAFeJT4PcUy8woxgtG5X
X-Google-Smtp-Source: AGHT+IFpaPazzDg+IVb46OKnEI+QiPVGoPraAHUMPRnUpPM+L24Uhm8neTTpkqEGu8MydYv2tb3KGQ==
X-Received: by 2002:a05:622a:182a:b0:466:a119:f4d3 with SMTP id d75a77b69052e-47167b01a79mr11817241cf.45.1738878402410;
Thu, 06 Feb 2025 13:46:42 -0800 (PST)
X-BeenThere: bitcoindev@googlegroups.com
Received: by 2002:a05:622a:6105:b0:467:8ca0:7f4b with SMTP id
d75a77b69052e-470535deaf4ls23039961cf.2.-pod-prod-01-us; Thu, 06 Feb 2025
13:46:39 -0800 (PST)
X-Received: by 2002:a05:620a:17ac:b0:7b9:a387:3cd8 with SMTP id af79cd13be357-7c047c7896cmr105694685a.42.1738878399528;
Thu, 06 Feb 2025 13:46:39 -0800 (PST)
Received: by 2002:a05:620a:564d:b0:7b6:dcc4:6708 with SMTP id af79cd13be357-7c040ac6488ms85a;
Thu, 6 Feb 2025 13:34:48 -0800 (PST)
X-Received: by 2002:a17:907:7e9b:b0:ab7:8739:e93e with SMTP id a640c23a62f3a-ab789c2d392mr48822166b.49.1738877686308;
Thu, 06 Feb 2025 13:34:46 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1738877686; cv=none;
d=google.com; s=arc-20240605;
b=d4dIsbYDjqW59+3UgwS3gLJVrwfmoJU/XZSqs87zxV1oBL6ch/cG+HT02Sp/LKQKkv
MA/mPadTpMmC44FOPeFZ2SqZnsNTMWAVfBMUWfT+PXBy3zjKSOO1rx0a0w2Ay46b/VY4
ecc9BDtV3RO21KvNXbW1fDDeFg1LP1bHCorZC5ePe76reLOpqTbjtiZFqUP6KKq2GqY+
zxJkM4kgBDdc/jtivJeAgo+f1TUBhuNT84RteTbG+kTo0f7MBg7u9+IBbrQ15auBOjxO
9wAVhD7DbsnVM2HIRJt7P8Sv6nyen6l31TCN6gNqk+w5ZgjVs/tSFDwzR30Y3etSILjc
JmFA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=dkim-signature:in-reply-to:from:content-language:references:to
:subject:user-agent:mime-version:date:message-id;
bh=akCRisRwF8qdLoci6VC+3ySESdt/NM0Frv1VhZdKuks=;
fh=VcGcg+Zjs9gw1uDcHbxsAILhBAcecnbJzZRdxgKVDIc=;
b=ZGIcDovEvy6S87O8UCDxhDq1S0rosWEVNQl86JKrhoGrD8+HFrZq9ajG2CoFvrStYp
2zgiNL5eh3ObxZrwTJh46TO2nfoMLRWoxKVN1zeJeoWRk8roTSxry1phq+VxZ6qz8qwr
kDuNc4YsfhBfHS5G5AzUEcEj4soFimXjNSA6ov1KaO4d7+MA42EOZZBNMmK+jurb8dc3
qoNpfCvKTGRrHyqPfMo3atNSDx3pNomeXPavJ9R67v8pHToS3xBQ7ZwdBNpShlQT1ZYv
X/5sn+rbxd58ThA0f6uyeFBLYEZL5fbJvQcy4AOQvYDy/YpHCYq0UIiFfh3zmlsYzW9S
raFA==;
dara=google.com
ARC-Authentication-Results: i=1; gmr-mx.google.com;
dkim=pass header.i=@murch.one header.s=uberspace header.b=s3A8Co1i;
spf=pass (google.com: domain of murch@murch.one designates 2a00:d0c0:200:0:1c7b:a6ff:fee0:8ea4 as permitted sender) smtp.mailfrom=murch@murch.one
Received: from mailgate02.uberspace.is (mailgate02.uberspace.is. [2a00:d0c0:200:0:1c7b:a6ff:fee0:8ea4])
by gmr-mx.google.com with ESMTPS id a640c23a62f3a-ab772faa9a9si6757266b.2.2025.02.06.13.34.46
for <bitcoindev@googlegroups.com>
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 06 Feb 2025 13:34:46 -0800 (PST)
Received-SPF: pass (google.com: domain of murch@murch.one designates 2a00:d0c0:200:0:1c7b:a6ff:fee0:8ea4 as permitted sender) client-ip=2a00:d0c0:200:0:1c7b:a6ff:fee0:8ea4;
Received: from farbauti.uberspace.de (farbauti.uberspace.de [185.26.156.235])
by mailgate02.uberspace.is (Postfix) with ESMTPS id F2450181414
for <bitcoindev@googlegroups.com>; Thu, 6 Feb 2025 22:34:45 +0100 (CET)
Received: (qmail 23325 invoked by uid 989); 6 Feb 2025 21:34:45 -0000
Received: from unknown (HELO unkown) (::1)
by farbauti.uberspace.de (Haraka/3.0.1) with ESMTPSA; Thu, 06 Feb 2025 22:34:45 +0100
Message-ID: <ff82fe21-8e02-42df-8760-c3e358a12766@murch.one>
Date: Thu, 6 Feb 2025 16:34:40 -0500
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: [bitcoindev] Update on the Great Consensus Cleanup Revival
To: bitcoindev@googlegroups.com
References: <jiyMlvTX8BnG71f75SqChQZxyhZDQ65kldcugeIDJVJsvK4hadCO3GT46xFc7_cUlWdmOCG0B_WIz0HAO5ZugqYTuX5qxnNLRBn3MopuATI=@protonmail.com>
Content-Language: en-US
From: Murch <murch@murch.one>
In-Reply-To: <jiyMlvTX8BnG71f75SqChQZxyhZDQ65kldcugeIDJVJsvK4hadCO3GT46xFc7_cUlWdmOCG0B_WIz0HAO5ZugqYTuX5qxnNLRBn3MopuATI=@protonmail.com>
Content-Type: multipart/signed; micalg=pgp-sha256;
protocol="application/pgp-signature";
boundary="------------QySIiw9NL6ezdkG2AN5k03gU"
X-Rspamd-Bar: -----
X-Rspamd-Report: BAYES_HAM(-3) XM_UA_NO_VERSION(0.01) SIGNED_PGP(-2) MIME_GOOD(-0.2) MIME_BASE64_TEXT(0.1)
X-Rspamd-Score: -5.09
X-Original-Sender: murch@murch.one
X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass
header.i=@murch.one header.s=uberspace header.b=s3A8Co1i; spf=pass
(google.com: domain of murch@murch.one designates 2a00:d0c0:200:0:1c7b:a6ff:fee0:8ea4
as permitted sender) smtp.mailfrom=murch@murch.one
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com
List-ID: <bitcoindev.googlegroups.com>
X-Google-Group-Id: 786775582512
List-Post: <https://groups.google.com/group/bitcoindev/post>, <mailto:bitcoindev@googlegroups.com>
List-Help: <https://groups.google.com/support/>, <mailto:bitcoindev+help@googlegroups.com>
List-Archive: <https://groups.google.com/group/bitcoindev
List-Subscribe: <https://groups.google.com/group/bitcoindev/subscribe>, <mailto:bitcoindev+subscribe@googlegroups.com>
List-Unsubscribe: <mailto:googlegroups-manage+786775582512+unsubscribe@googlegroups.com>,
<https://groups.google.com/group/bitcoindev/subscribe>
X-Spam-Score: -0.8 (/)
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------QySIiw9NL6ezdkG2AN5k03gU
Content-Type: multipart/mixed; boundary="------------SPEFwIJksC7veo0kwbggafmt";
protected-headers="v1"
From: Murch <murch@murch.one>
To: bitcoindev@googlegroups.com
Message-ID: <ff82fe21-8e02-42df-8760-c3e358a12766@murch.one>
Subject: Re: [bitcoindev] Update on the Great Consensus Cleanup Revival
References: <jiyMlvTX8BnG71f75SqChQZxyhZDQ65kldcugeIDJVJsvK4hadCO3GT46xFc7_cUlWdmOCG0B_WIz0HAO5ZugqYTuX5qxnNLRBn3MopuATI=@protonmail.com>
In-Reply-To: <jiyMlvTX8BnG71f75SqChQZxyhZDQ65kldcugeIDJVJsvK4hadCO3GT46xFc7_cUlWdmOCG0B_WIz0HAO5ZugqYTuX5qxnNLRBn3MopuATI=@protonmail.com>
--------------SPEFwIJksC7veo0kwbggafmt
Content-Type: text/plain; charset="UTF-8"; format=flowed
Content-Transfer-Encoding: quoted-printable
Thank you for the update and your work on the Great Consensus Cleanup. I=20
am looking forward to reading your BIP, and would hope that you could=20
share here or in the BIP=E2=80=99s Rationale what convinced you to change t=
he=20
grace period from 600 seconds to 7200 seconds and how the nLockTime of=20
height-1=E2=80=AFwon out.
Cheers,
Murch
On 2025-02-05 13:09, 'Antoine Poinsot' via Bitcoin Development Mailing=20
List wrote:
> Hi everyone,
>=20
> A bit over a year ago i started working on revisiting the 2019 Great Cons=
ensus Cleanup proposal from
> Matt Corallo [0]. His proposal included:
> - making <=3D64 bytes transactions invalid to fix merkle tree weaknesses;
> - making non-pushonly scriptSigs, FindAndDelete matches, OP_CODESEPARATOR=
and non-standard sighash
> types fail script validation to mitigate the worst case block validati=
on time;
> - restrict the nTime field of the first block in each difficulty adjustme=
nt interval to be no less
> than 600 seconds lower than the previous block's;
>=20
> I set out to research the impact of each of the vulnerabilities this inte=
nded to patch, the
> alternative fixes possible for each and finally if there was any other pr=
otocol bug fix we'd want to
> include if we went through the considerable effort of soft forking Bitcoi=
n already.
>=20
> Later in March i shared some first findings on Delving [1] and advertized=
the effort on this mailing
> list [2]. I also created a companion thread on Delving, kept private, to =
discuss the details of the
> worst case block validation time [3]. As one would expect due to the larg=
er design space available
> to fix this issue, this private thread is where most of the discussion wo=
uld happen. Thank you to
> everyone who contributed feedback, insights, ideas and argumented opinion=
s on the different issues
> all along the process.
>=20
> Now i would like to update the broader Bitcoin development community on t=
he outcome of this effort.
> I believe a Consensus Cleanup proposal should include the following.
> - A fix for vulnerabilities surrounding the use of timestamps in the diff=
iculty adjustment
> algorithm. In particular, a fix for the timewarp attack with a 7200 s=
econds grace period as well
> as a fix for the Murch-Zawy attack [4] by making invalid any difficult=
y adjustment period with a
> negative duration.
> - A fix for long block validation times with a minimal "confiscation surf=
ace", by introducing a
> per-transaction limit on the number of legacy sigops in the inputs.
> - A fix for merkle tree weaknesses by making transactions which serialize=
to exactly 64 bytes
> invalid.
> - A fix for duplicate transactions to supplement BIP34 in order to avoid =
resuming unnecessary BIP30
> validation in the future. This is achieved by mandating the nLockTime =
field of coinbase
> transaction to be set to the height of their block minus 1.
>=20
> I have started drafting a BIP draft with the detailed specs for this.
>=20
> Antoine Poinsot
>=20
>=20
> [0] https://github.com/TheBlueMatt/bips/blob/7f9670b643b7c943a0cc6d2197d3=
eabe661050c2/bip-XXXX.mediawiki
> [1] https://delvingbitcoin.org/t/great-consensus-cleanup-revival/710
> [2] https://groups.google.com/g/bitcoindev/c/CAfm7D5ppjo/m/bYJ3BiOuAAAJ
> [3] https://delvingbitcoin.org/t/worst-block-validation-time-inquiry/711
> [4] https://delvingbitcoin.org/t/zawy-s-alternating-timestamp-attack/1062=
#variant-on-zawys-attack-2
>=20
--=20
You received this message because you are subscribed to the Google Groups "=
Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/=
ff82fe21-8e02-42df-8760-c3e358a12766%40murch.one.
--------------SPEFwIJksC7veo0kwbggafmt--
--------------QySIiw9NL6ezdkG2AN5k03gU
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEENfStpiPrn+OjvH72e6A1yluQFxMFAmelKvEACgkQe6A1yluQ
FxNmGA/9E052nIIiIyJV6ncbIHPnsta/oOxk7MbWaQypth8gWa6L2P29iBGFVBxG
wNmEEqJv49tLNxn2Ydn2Ibl+ko0FMN/A5aApLZOURzyYSEY0zNA0nJX+G2YUkRzb
uQgUgNDyijsLfeKgJ6XTjEBko8Ziz5PLuRqszGjlY7Qs9wE6+pE4A+Sa2BmTyedB
FtqL24eaKD+5PRhkLq3bcTKLi0Qoc+f29vH6eYqY7UZh6F6cL1i1phP0BcSMGiHn
g0VE2PQBbc0ZaVNQJIAnDmkfvFPXVqoY7zn3xtaHGrm9RFcCu2u4RbU5aJJlpANW
5aEp+xr/yCzrjXCXorDGhosg81xOoJJMM6SbEVEdwCwOspMPgEZaWJFLkbLcZTrM
YZR2nuSnsr1DAhVSIRfeBnN9QeaK5DeCPiAQ+nFAYQ0XjcWUW6EOIhHE3g88+0PI
NWQIYQFB/mAWPTSpo3kwWCF1R8bVHyGWtITodGCGFZeneVz7wYeeTYmS2oYpPBU0
G09mN3cxTjyIFinVJFWZVPUnUZvLSjsjLpr6NNp9ZoIbqiKwa/PrynJ6IK4+dxRB
Zh7nUgch+YL6Rjdew0UmCwAu5XSWAc5Kp0E8aU9sPCLw6PN8hGjsNLrNKJkyvNl2
LZIVZ4COkFWhYttc6imc3V7COQURMa7pZ8MfyWdOgcVBglG5K4g=
=6y2M
-----END PGP SIGNATURE-----
--------------QySIiw9NL6ezdkG2AN5k03gU--
|
