Rusty Russell [ARCHIVE] on Nostr: 📅 Original date posted:2015-08-20 📝 Original message: Hi all! So, with some ...
📅 Original date posted:2015-08-20
📝 Original message:
Hi all!
So, with some prompting from AJ who has been working on node
incentives, I realized there's a nasty attack available to the network.
You simply route a payment back to another channel you own, then refuse
to dislose R.
You have to lock up N bitcoins, but so does every node in the path (and
nobody gets paid!). Onion routing means nobody knows who to blame (you
can simply claim there's another hop after you).
I think in this case we need to peel the onion[1]: if a payment takes
too long you tell the previous node where you sent it (and relay where
it sent it, etc.) If you're the last in the queue, you also need to
prove that you closed the channel to the offender[2] (which costs you a
txfee, providing disincentive).
Anyone see any other problems?
Thanks,
Rusty.
[1] Which means exposing a set of hashes corresponding to hashes of the
route steps, and including a nonce inside each route step, so you
can prove you decrypted it.
[2] eg. provide the commitment tx or mutual close tx, and a signature
from that node's key provign that they created it with you.
Published at
2023-06-09 12:44:03Event JSON
{
"id": "331253379f3ea6dc10681974165b01bb784d1d70ab58098157fa7daab29f4f4d",
"pubkey": "13bd8c1c5e3b3508a07c92598647160b11ab0deef4c452098e223e443c1ca425",
"created_at": 1686314643,
"kind": 1,
"tags": [
[
"e",
"a92f734d740b85399f0e70711c3ef451f97eec2048c08c21ef8e0700fe174d1c",
"",
"reply"
],
[
"p",
"9456f7acb763eaab2e02bd8e60cf17df74f352c2ae579dce1f1dd25c95dd611c"
]
],
"content": "📅 Original date posted:2015-08-20\n📝 Original message:\nHi all!\n\n So, with some prompting from AJ who has been working on node\nincentives, I realized there's a nasty attack available to the network.\nYou simply route a payment back to another channel you own, then refuse\nto dislose R.\n\nYou have to lock up N bitcoins, but so does every node in the path (and\nnobody gets paid!). Onion routing means nobody knows who to blame (you\ncan simply claim there's another hop after you).\n\nI think in this case we need to peel the onion[1]: if a payment takes\ntoo long you tell the previous node where you sent it (and relay where\nit sent it, etc.) If you're the last in the queue, you also need to\nprove that you closed the channel to the offender[2] (which costs you a\ntxfee, providing disincentive).\n\nAnyone see any other problems?\n\nThanks,\nRusty.\n\n[1] Which means exposing a set of hashes corresponding to hashes of the\n route steps, and including a nonce inside each route step, so you\n can prove you decrypted it.\n[2] eg. provide the commitment tx or mutual close tx, and a signature\n from that node's key provign that they created it with you.",
"sig": "10d4535193205563045521ee01e949a0f35d83a26bf29731e6ebe295a2b5af8b4c4a09c1e1420b7dbd85e8b6ffeeea7a4f1e246d7da51c6a4ea7011a741ad466"
}