📅 Original date posted:2021-04-04
📝 Original message:On Tue, 16 Mar 2021 at 11:25, David A. Harding via bitcoin-dev <
bitcoin-dev at lists.linuxfoundation.org> wrote:
>
> I curious about whether anyone informed about ECC and QC
> knows how to create output scripts with lower difficulty that could be
> used to measure the progress of QC-based EC key cracking. E.g.,
> NUMS-based ECDSA- or taproot-compatible scripts with a security strength
> equivalent to 80, 96, and 112 bit security.
Hi Dave,
This is actually relatively easy if you are willing to use a trusted setup.
The trusted party takes a secp256k1 secret key and verifiably encrypt it
under a NUMS public key from the weaker group. Therefore if you can crack
the weaker group's public key you get the secp256k1 secret key.
Camenisch-Damgard[1] cut-and-choose verifiable encryption works here.
People then pay the secp256k1 public key funds to create the bounty. As
long as the trusted party deletes the secret key afterwards the scheme is
secure.
Splitting the trusted setup among several parties where only one of them
needs to be honest looks doable but would take some engineering and
analysis work.
[1] https://link.springer.com/content/pdf/10.1007/3-540-44448-3_25.pdf
Cheers,
LL
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20210405/599aee9f/attachment-0001.html>;
Lloyd Fournier [ARCHIVE] /
npub1kh…y05yp
2023-06-07 18:31:12
in reply to nevent1q…3x00
Author Public Key
npub1khlhcuz0jrjwa0ayznq2q9agg4zvxfvx5x7jljrvwnpfzngrcf0q7y05ypPublished at
2023-06-07 18:31:12Event JSON
{
"id": "b040ec6f66e6fdeed7851f84e5f67368313961381ff26b28e3d97497a9a775d8",
"pubkey": "b5ff7c704f90e4eebfa414c0a017a84544c32586a1bd2fc86c74c2914d03c25e",
"created_at": 1686162672,
"kind": 1,
"tags": [
[
"e",
"9cab184871dd704881e0ae8b75176009a0ef59da2ef94b38712941efc37b1034",
"",
"reply"
],
[
"p",
"a23dbf6c6cc83e14cc3df4e56cc71845f611908084cfe620e83e40c06ccdd3d0"
]
],
"content": "📅 Original date posted:2021-04-04\n📝 Original message:On Tue, 16 Mar 2021 at 11:25, David A. Harding via bitcoin-dev \u003c\nbitcoin-dev at lists.linuxfoundation.org\u003e wrote:\n\n\u003e\n\u003e I curious about whether anyone informed about ECC and QC\n\u003e knows how to create output scripts with lower difficulty that could be\n\u003e used to measure the progress of QC-based EC key cracking. E.g.,\n\u003e NUMS-based ECDSA- or taproot-compatible scripts with a security strength\n\u003e equivalent to 80, 96, and 112 bit security.\n\n\nHi Dave,\n\nThis is actually relatively easy if you are willing to use a trusted setup.\nThe trusted party takes a secp256k1 secret key and verifiably encrypt it\nunder a NUMS public key from the weaker group. Therefore if you can crack\nthe weaker group's public key you get the secp256k1 secret key.\nCamenisch-Damgard[1] cut-and-choose verifiable encryption works here.\nPeople then pay the secp256k1 public key funds to create the bounty. As\nlong as the trusted party deletes the secret key afterwards the scheme is\nsecure.\n\nSplitting the trusted setup among several parties where only one of them\nneeds to be honest looks doable but would take some engineering and\nanalysis work.\n\n[1] https://link.springer.com/content/pdf/10.1007/3-540-44448-3_25.pdf\n\nCheers,\n\nLL\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20210405/599aee9f/attachment-0001.html\u003e",
"sig": "434c5c232e9ac6e4b0f0f79c30cbc41f2829837b87140a40b01c23ca2ca003a877c769ae3c016d74e17ea1fb97d8a795605227e38d7e61357b35e31cfc8134ca"
}