arbed_out

The cat's out of the bag with the new @TFTC21: Sigbash v2 is live! We've switched to a new approach that I'm calling Oblivious Signing: using MuSig2, WebAssembly, and zero knowledge proofs, our signer never sees your signing key *or* the transactions you ask us to sign (!)

W00t? Taproot channels that also use v3 transactions? With an extension for better mobile wallet safety? Shut up and take my sats. github.com/lightning/bolt…

(Steelmanning my own tweet, I guess the answer is: forklift upgrades of proof systems are *hard*, in a months-of-effort-to-get-to-the-same-place-you-were sort of way, and the preference for publishing quickly outweighs the need for a PQ ZKP at this particular point in time.)

Tweeting around That Paper Everyone Is Talking About Today, instead of tweeting about it directly: Is there a good reason for using Groth16 for the ZKP that I'm not seeing? It's an easy dunk to say "even the PQ folks don't want to use PQ crypto" - why not use a different one?

Please welcome SHRIMPS🦐 to the family of stateful PQ signatures: 2.5 KB hash-based sigs across multiple devices. SHRINCS🛋️ gave ~324-byte sigs but is single-device. SHRIMPS🦐 addresses multi-device; any device loaded from the same seed creates sigs 3x smaller than SLH-DSA

@arbedout Hello

signet but the blocks come in faster, like maybe every 30 seconds or so who is building this?

@notgrubles (the meta joke is that i really need to spend the 10 minutes of effort to switch my test harness from signet to mutinynet instead of waiting 30+min for my txn's to confirm)

leaving this here for related reasons

Can't recommend @trailofbits's ZKDocs site enough zkdocs.com/docs/zkdocs/ Also hilarious that a cybersecurity audit firm was so fed up with finding the same zero knowledge proof implementation bugs over and over they wrote a from-scratch tutorial to teach devs How Not To Suck

I don't think these @FoundryServices blocks were a selfish-mining "attack". While it might look similar, the data multiple parties have contributed points to "expected" network behavior. I've written a functional test to simulate this. details: bnoc.xyz/t/two-block-re…

@_prestwich ...why did this immediately make me think of the boat ride scene in Willy Wonka?

@arbedout tests are always green on this side of the river

no sleep till B̶r̶o̶o̶k̶l̶y̶n̶ tests are green again

New number assignment: The “Grand Script Renaissance” BIPs, “Varops Budget for Script Runtime Constraint” and “Restoration of disabled script (Tapleaf 0xC2)” shall be referred to as BIP 440 and 441:

Propagating header of 941881 doesn't really make sense in the context of a selfish mining attack. But it makes sense if the header is used as a signal sent to others members of a cartel...

@niftynei PLEAAAAASE twitter.com/arbedout/statu…

nonce reuse, not even once 🙅‍♀️

Spent the weekend auditing TEE-based crypto projects on mainnets. It’s worse than I expected. “Remote attestation” is mostly just theatre. With one exception (Flashbots), users are being sold security properties that simply aren’t there.

Do you know what your Bitcoin transactions reveal about you? am-i.exposed shows you. It's an on-chain privacy scanner that analyzes addresses and transactions. 🧵

Mutinynet is getting over a million requests a day just asking the tip height. Blocking some IPs, wtf are you savages doing

Have to admit I was wrong on this one. Collective IQ hasn't dropped to the single digits; it's easily negative double digits at this point Literally, as in scrolling the TL is now dropping my own IQ 20+ points instantaneously