Bram Cohen [ARCHIVE] on Nostr: 📅 Original date posted:2022-03-16 📝 Original message:On Thu, Mar 10, 2022 at ...
📅 Original date posted:2022-03-16
📝 Original message:On Thu, Mar 10, 2022 at 8:46 PM Anthony Towns <aj at erisian.com.au> wrote:
> Note that PTLCs aren't really Chia-friendly, both because chia doesn't
> have secp256k1 operations in the first place, but also because you can't
> do a scriptless-script because the information you need to extract
> is lost when signatures are non-interactively aggregated via BLS --
> so that adds an expensive extra ECC operation rather than reusing an
> op you're already paying for (scriptless script PTLCs) or just adding
> a cheap hash operation (HTLCs).
>
The CLVM currently supports BLS12-381 group 1 point operations which it
uses to support taproot which I think is enough to support PTLCs but
obviously isn't compatible with secp. In the future there will likely be a
soft fork to include a complete set of BLS12-381 operations mostly to
support ZK implementation.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <
http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20220315/497a7250/attachment.html>
Published at
2023-06-07 23:05:18Event JSON
{
"id": "553bcf406d6a92d7e9b80b16db44a4fcdaba364cb44373c97bd04038ee908bb8",
"pubkey": "fb7007c42a06687e3cd3fbbb1a3b17972e2a949ae679445f6b96579114d05cd9",
"created_at": 1686179118,
"kind": 1,
"tags": [
[
"e",
"17a237ce59197bc5ffad96769beec5209b19830977cb935d9412190ad411e7e9",
"",
"root"
],
[
"e",
"96bb263639cf9fcd2984c6fc7bc7d22c1c55db075c00cbbef3805c01d281e180",
"",
"reply"
],
[
"p",
"f0feda6ad58ea9f486e469f87b3b9996494363a26982b864667c5d8acb0542ab"
]
],
"content": "📅 Original date posted:2022-03-16\n📝 Original message:On Thu, Mar 10, 2022 at 8:46 PM Anthony Towns \u003caj at erisian.com.au\u003e wrote:\n\n\u003e Note that PTLCs aren't really Chia-friendly, both because chia doesn't\n\u003e have secp256k1 operations in the first place, but also because you can't\n\u003e do a scriptless-script because the information you need to extract\n\u003e is lost when signatures are non-interactively aggregated via BLS --\n\u003e so that adds an expensive extra ECC operation rather than reusing an\n\u003e op you're already paying for (scriptless script PTLCs) or just adding\n\u003e a cheap hash operation (HTLCs).\n\u003e\n\nThe CLVM currently supports BLS12-381 group 1 point operations which it\nuses to support taproot which I think is enough to support PTLCs but\nobviously isn't compatible with secp. In the future there will likely be a\nsoft fork to include a complete set of BLS12-381 operations mostly to\nsupport ZK implementation.\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20220315/497a7250/attachment.html\u003e",
"sig": "02179a8488b0ac954322233cb216c8d1bc2b02eb52043efa59c271c3462f6131a82a5943e65dd28671188694567d64e56534c22718225b1e0138e2a1c7cc8996"
}