📅 Original date posted:2019-12-20
📝 Original message:
Good morning Esteban,
> On Fri, Dec 20, 2019 at 12:59 PM ZmnSCPxj via Lightning-dev <lightning-dev at lists.linuxfoundation.org> wrote:
>
> > Current Lightning Network mutual closes are spends of 2-of-2 outputs.
> > Given that most people will use either 1-of-1 or 2-of-3 ("never go to sea with two chronometers, take one or three"), they stand out and it is reasonable to assume that any 2-of-2 will be Lightning.
>
> Interesting... alternatively, one could explore modifying the current 2-of-2 closing outputs to make them undistinguishable from 2-of-3 outputs by negotiating a random third public key with a nonexistent private key (like XORing random values provided by each channel participant).
It has the drawback of requiring three public keys in the resulting revealed SCRIPT rather than two.
Further, *hopefully* the incoming BIP-Schnorr, with *hopefully* upcoming improvements in the verifiable secret splitting thing, will allow "normal" MuSig 2-of-2 to be indistinguishable from 2-of-3 as well.
It would be best to have a standardized NUMS point, then have both participants add their own one-time points to that point, precommitting hashes of those points first, then providing the points, then generating the sum of standard NUMS plus their random points.
Regards,
ZmnSCPxj
ZmnSCPxj [ARCHIVE] /
npub1g5…3ms3l
2023-06-09 12:57:52
in reply to nevent1q…0ynd
Author Public Key
npub1g5zswf6y48f7fy90jf3tlcuwdmjn8znhzaa4vkmtxaeskca8hpss23ms3lSeen on
wss://relay.noswhere.comPublished at
2023-06-09 12:57:52Event JSON
{
"id": "850e6a8fe315ec1e4a2b30f9ba10b7bd194673ebdd0dc3363b69ed3036e0fae7",
"pubkey": "4505072744a9d3e490af9262bfe38e6ee5338a77177b565b6b37730b63a7b861",
"created_at": 1686315472,
"kind": 1,
"tags": [
[
"e",
"1499f1bac287e8f0a1420b153db788b2492f8e8fe152b6bb231933ec6575b64d",
"",
"root"
],
[
"e",
"c164a955c2ab4118b862503b69f100df5788938dee0c00d980141bd47245c8fb",
"",
"reply"
],
[
"p",
"f49eaffa38c4007e2dc7b0c01b9a8395be3373b534f69f45d082a739b5982552"
]
],
"content": "📅 Original date posted:2019-12-20\n📝 Original message:\nGood morning Esteban,\n\n\u003e On Fri, Dec 20, 2019 at 12:59 PM ZmnSCPxj via Lightning-dev \u003clightning-dev at lists.linuxfoundation.org\u003e wrote:\n\u003e\n\u003e \u003e Current Lightning Network mutual closes are spends of 2-of-2 outputs.\n\u003e \u003e Given that most people will use either 1-of-1 or 2-of-3 (\"never go to sea with two chronometers, take one or three\"), they stand out and it is reasonable to assume that any 2-of-2 will be Lightning.\n\u003e\n\u003e Interesting... alternatively, one could explore modifying the current 2-of-2 closing outputs to make them undistinguishable from 2-of-3 outputs by negotiating a random third public key with a nonexistent private key (like XORing random values provided by each channel participant).\n\nIt has the drawback of requiring three public keys in the resulting revealed SCRIPT rather than two.\nFurther, *hopefully* the incoming BIP-Schnorr, with *hopefully* upcoming improvements in the verifiable secret splitting thing, will allow \"normal\" MuSig 2-of-2 to be indistinguishable from 2-of-3 as well.\n\nIt would be best to have a standardized NUMS point, then have both participants add their own one-time points to that point, precommitting hashes of those points first, then providing the points, then generating the sum of standard NUMS plus their random points.\n\nRegards,\nZmnSCPxj",
"sig": "60fa14eee827f5cce5e38d9a60be63d14f3d9dbdbeadd35d6848e38778297507530945d3ef8f4207d5aeb9e2b772160d64fc717e132a4d4d62863da241df8e32"
}