-
Notifications
You must be signed in to change notification settings - Fork 4
Discussion zone for wiki doc: "Mimblewimble Non-Interactive Transaction" #59
Comments
In your construction, is it the case that if Alice makes two payments to Bob, then she knows the difference in blinding factors of the resulting outputs of Bob? |
@tromp Thanks for comments. Say, in first payment of Alice to Bob: then in second payment of Alice to Bob: So, for Alice, she knows the difference in the private keys of P1' and P2': Is this what you are thinking? I think the Monero has been using this Stealth Address scheme for years. |
In regular MW, that would be a problem. When Bob spends one of them to an accomplice of Alice, she can steal the other output by reusing the kernel. |
The additional spending signature attached to Now in this non-interactive transaction scheme, each signature has its dedicated purpose:
|
@DavidBurkett posted a finding into https://t.me/gottstech/791 at Nov. 24, 2020
And my checking:
|
Today I got a time to describe a fix for above flaw and a solution to freeze cut-through for NIT, I will update the paper later. A feasible solution is freezing all cut-through behaviour in the transaction pool, by adding a field As drawing in figure.2, the merged transaction The cut-through between the blocks is still feasible, which is great to reduce weight for non-archive nodes. Normally the cut-through between blocks is launched for the old blocks beyond the Horizon, we will discuss more about that in §3.1. (...) Another cost in this solution is the new field The last one is about the payload size increment. Looking into that for Outputs vector size encoding, since we can use the variable size transaction kernel, we can define a missing field |
Above fix solution is not perfect yet. I did a major updating on this NIT scheme a few days ago and published in https://eprint.iacr.org/2020/1064.pdf , please use the latest version for the reviewing and comments. 🌻 |
This is a discussion zone for wiki doc: https://github.com/gottstech/gotts/wiki/Mimblewimble-Non-Interactive-Transaction
(Revised at Oct. 10, 2020)
The text was updated successfully, but these errors were encountered: