1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
Return-Path: <crypto@timruffing.de>
Received: from smtp2.osuosl.org (smtp2.osuosl.org [140.211.166.133])
by lists.linuxfoundation.org (Postfix) with ESMTP id 6BC98C0001
for <bitcoin-dev@lists.linuxfoundation.org>;
Sat, 15 May 2021 20:25:32 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
by smtp2.osuosl.org (Postfix) with ESMTP id 53115401AE
for <bitcoin-dev@lists.linuxfoundation.org>;
Sat, 15 May 2021 20:25:32 +0000 (UTC)
X-Virus-Scanned: amavisd-new at osuosl.org
X-Spam-Flag: NO
X-Spam-Score: -2.801
X-Spam-Level:
X-Spam-Status: No, score=-2.801 tagged_above=-999 required=5
tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,
DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7,
SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: smtp2.osuosl.org (amavisd-new);
dkim=pass (2048-bit key) header.d=timruffing.de
Received: from smtp2.osuosl.org ([127.0.0.1])
by localhost (smtp2.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 1nysXyWLTPj7
for <bitcoin-dev@lists.linuxfoundation.org>;
Sat, 15 May 2021 20:25:30 +0000 (UTC)
X-Greylist: from auto-whitelisted by SQLgrey-1.8.0
Received: from mout-p-201.mailbox.org (mout-p-201.mailbox.org
[IPv6:2001:67c:2050::465:201])
by smtp2.osuosl.org (Postfix) with ESMTPS id 6472B40192
for <bitcoin-dev@lists.linuxfoundation.org>;
Sat, 15 May 2021 20:25:30 +0000 (UTC)
Received: from smtp2.mailbox.org (smtp2.mailbox.org
[IPv6:2001:67c:2050:105:465:1:2:0])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest
SHA256) (No client certificate requested)
by mout-p-201.mailbox.org (Postfix) with ESMTPS id 4FjH2b6T8CzQj4Y;
Sat, 15 May 2021 22:25:27 +0200 (CEST)
X-Virus-Scanned: amavisd-new at heinlein-support.de
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=timruffing.de;
s=MBO0001; t=1621110326;
h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
to:to:cc:mime-version:mime-version:content-type:content-type:
content-transfer-encoding:content-transfer-encoding:
in-reply-to:in-reply-to:references:references;
bh=ouLtHaec4zg5RcAJg6rmamJ9oDXa4lxHqA1FzfUN0vs=;
b=f50MGJLWa5nhzszoC84oZQlz4sFG/0nrq2ktARsdKIDtk08WCaSkWO3l5Udj/DY4h0zx3A
JIr6PiTFvfkE/wHm7BrcyZi9OuzPzeqDrDYlW4LM6J17Xvl0qQlHaHgFKfX7WycT7DtWAo
LXwA//jjGC9s8ayJRUZ+G8vd23t2yMgAAr43Mqtzq9HyfaawYVtG4lUrNHpYG1fFMHC/r5
HbDKNPVASs32muXS9x5HxhpaSsz+8aWeCs5mPXoHzo5PBctyMmg1iLRCrwF7JgQndTJSH0
6LZUYGQtzwYSakr6Ar2zeDwYUqymZB34y86qbV111+eBbGTpYGrqdbvWIkMngw==
Received: from smtp2.mailbox.org ([80.241.60.241])
by spamfilter05.heinlein-hosting.de (spamfilter05.heinlein-hosting.de
[80.241.56.123]) (amavisd-new, port 10030)
with ESMTP id hLHGju01GFFt; Sat, 15 May 2021 22:25:24 +0200 (CEST)
Message-ID: <13a8be987fc22ecc6284de4b84ef5310f2cd420c.camel@timruffing.de>
From: Tim Ruffing <crypto@timruffing.de>
To: vjudeu <vjudeu@gazeta.pl>, Bitcoin Protocol Discussion
<bitcoin-dev@lists.linuxfoundation.org>
Date: Sat, 15 May 2021 22:25:23 +0200
In-Reply-To: <131606955-6366ea10aec2eec765339d72e7c936ab@pmq5v.m5r2.onet>
References: <131606955-6366ea10aec2eec765339d72e7c936ab@pmq5v.m5r2.onet>
Content-Type: text/plain; charset="UTF-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-MBO-SPAM-Probability:
X-Rspamd-Score: -3.71 / 15.00 / 15.00
X-Rspamd-Queue-Id: BEF871800
X-Rspamd-UID: 441fbd
X-Mailman-Approved-At: Sat, 15 May 2021 20:31:54 +0000
Subject: Re: [bitcoin-dev] Sum of the keys attack on taproot
X-BeenThere: bitcoin-dev@lists.linuxfoundation.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Bitcoin Protocol Discussion <bitcoin-dev.lists.linuxfoundation.org>
List-Unsubscribe: <https://lists.linuxfoundation.org/mailman/options/bitcoin-dev>,
<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=unsubscribe>
List-Archive: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/>
List-Post: <mailto:bitcoin-dev@lists.linuxfoundation.org>
List-Help: <mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=help>
List-Subscribe: <https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev>,
<mailto:bitcoin-dev-request@lists.linuxfoundation.org?subject=subscribe>
X-List-Received-Date: Sat, 15 May 2021 20:25:32 -0000
On Sat, 2021-05-15 at 12:21 +0200, vjudeu via bitcoin-dev wrote:
> All that is needed is producing a signature matching the sum of the
> public keys used in taproot, which is "(a+b-a)*G",
This is simply not true.
Taproot does not enable this, or any other form of "cross-input
aggregation", i.e., spending multiple UTXOs with a single signature.
Tim
|
