📅 Original date posted:2019-07-17
📝 Original message:
Perhaps worth noting that in addition to selling signatures, it's also possible
to sell blind Schnorr signatures [0] and anonymous credentials [1].
[0] https://github.com/ElementsProject/scriptless-scripts/blob/master/md/partially-blind-swap.md
[1] https://youtu.be/XORDEX-RrAI?t=26552, slides https://nickler.ninja/slides/2018-bob.pdf
On 7/17/19 3:37 PM, Nadav Kohen wrote:
> Hi All,
>
> I recently posted a proposal here for a scheme through which a trusted data
> provider can utilize the Lightning Network to privately sell data where
> data is received atomically with purchase.
>
> I've more recently been thinking about situations where a party, that is
> *not* trusted, is attempting to sell its signature to a known message. One
> example of a situation where this would be useful is if someone is trying
> to offer a DLC-like Option contract where they are essentially
> collateralizing themselves in a funding transaction and then selling their
> signatures to Contract Execution Transactions (CETs). In this example, we
> must ensure that the buyer of the signatures pays if and only if they
> receive valid signatures for the CETs which are known.
>
> I believe that this is achievable in a relatively straightforward way if we
> were to use ZmnSCPxj's proposed payment points with scalars (as opposed to
> payment hashes with pre-images). The (Schnorr) signature seller could give
> the buyer their one-time public key, `R = k*G`, through which the buyer
> could compute the payment point whose scalar is the seller's signature:
> `sig*G = R + h(m, R)*A` where `A` is the seller's public key. Using this
> value as the payment point, the buyer could be assured that they pay if and
> only if they receive `sig` from the seller, where `sig` is the desired
> valid signature of `m`!
>
> Best,
> Nadav
>
>
> _______________________________________________
> Lightning-dev mailing list
> Lightning-dev at lists.linuxfoundation.org
> https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev
>
Jonas Nick [ARCHIVE] /
npub1at…y3z5a
2023-06-09 12:55:40
in reply to nevent1q…w8hn
Author Public Key
npub1at3pav59gkeqz9kegzqhk2v4j4r435x42ytf23pxs8crt74tuc8s2y3z5aPublished at
2023-06-09 12:55:40Event JSON
{
"id": "aa811b86a56ecb6e360d7a0884ea7a79edc89e199c2f8338719a59c13a8d6a08",
"pubkey": "eae21eb28545b20116d940817b2995954758d0d5511695442681f035faabe60f",
"created_at": 1686315340,
"kind": 1,
"tags": [
[
"e",
"5cddaf82effce7dc9e4a6ba27ca7b7bfbc9b2e6253e258591b2336e7e35680bf",
"",
"root"
],
[
"e",
"864b562f6869f8a8e8f2edb5f18e308f05d88ed3b79039d6f06435353fbf1dc1",
"",
"reply"
],
[
"p",
"4505072744a9d3e490af9262bfe38e6ee5338a77177b565b6b37730b63a7b861"
]
],
"content": "📅 Original date posted:2019-07-17\n📝 Original message:\nPerhaps worth noting that in addition to selling signatures, it's also possible\nto sell blind Schnorr signatures [0] and anonymous credentials [1].\n\n[0] https://github.com/ElementsProject/scriptless-scripts/blob/master/md/partially-blind-swap.md\n[1] https://youtu.be/XORDEX-RrAI?t=26552, slides https://nickler.ninja/slides/2018-bob.pdf\n\nOn 7/17/19 3:37 PM, Nadav Kohen wrote:\n\u003e Hi All,\n\u003e \n\u003e I recently posted a proposal here for a scheme through which a trusted data\n\u003e provider can utilize the Lightning Network to privately sell data where\n\u003e data is received atomically with purchase.\n\u003e \n\u003e I've more recently been thinking about situations where a party, that is\n\u003e *not* trusted, is attempting to sell its signature to a known message. One\n\u003e example of a situation where this would be useful is if someone is trying\n\u003e to offer a DLC-like Option contract where they are essentially\n\u003e collateralizing themselves in a funding transaction and then selling their\n\u003e signatures to Contract Execution Transactions (CETs). In this example, we\n\u003e must ensure that the buyer of the signatures pays if and only if they\n\u003e receive valid signatures for the CETs which are known.\n\u003e \n\u003e I believe that this is achievable in a relatively straightforward way if we\n\u003e were to use ZmnSCPxj's proposed payment points with scalars (as opposed to\n\u003e payment hashes with pre-images). The (Schnorr) signature seller could give\n\u003e the buyer their one-time public key, `R = k*G`, through which the buyer\n\u003e could compute the payment point whose scalar is the seller's signature:\n\u003e `sig*G = R + h(m, R)*A` where `A` is the seller's public key. Using this\n\u003e value as the payment point, the buyer could be assured that they pay if and\n\u003e only if they receive `sig` from the seller, where `sig` is the desired\n\u003e valid signature of `m`!\n\u003e \n\u003e Best,\n\u003e Nadav\n\u003e \n\u003e \n\u003e _______________________________________________\n\u003e Lightning-dev mailing list\n\u003e Lightning-dev at lists.linuxfoundation.org\n\u003e https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev\n\u003e",
"sig": "b1a36cb286ffc324e8c6408a0413e7308399da5bdf411c93523c44023690008dbf26a954e1921398f22142610e7aee5950e8d513ec0dbbee44a88631cfe0ef12"
}