📅 Original date posted:2020-03-06
📝 Original message:
Hi,
I was reading the paper by Poon and Dryja on Bitcoin Lightning
Network and was going through the construction of HTLC. Suppose 2 parties A
and B have a channel with each party locking 0.5 BTC. Suppose A wants to
transfer 0.1 BTC to B contingent to the knowledge of R : H=h(R) produced
within a locktime of say t days. So the script output for A is -
1. 0.4 BTC to A
2. 0.5 BTC to B
3. 0.1 BTC locked in HTLC between A & B.
Why we cannot set the terms as say 0.4 BTC to A, 0.2 BTC to B and 0.4 BTC
to HTLC, where HTLC output can follow either of the paths - If B produces R
within t days then it gets back 0.4 BTC else after t days A can broadcast
with 0.4 BTC going to the A? This prevents B from not responding (and
induce possibly griefing attack across a longer path by withholding the
solution) since it will lose out 0.3 BTC. What can be the problem if the
terms of HTLC itself tries to enforce a penalty on the counterparty?
--
Yours sincerely,
Subhra Mazumdar.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/lightning-dev/attachments/20200306/6350cd37/attachment.html>;
Subhra Mazumdar [ARCHIVE] /
npub1sn…g9vl0
2023-06-09 12:59:11
in reply to nevent1q…hpyx
Author Public Key
npub1snw7t4auupm70ntyeywuzqn80cf6es53ym8rlzymh8ft97qmyq9qrg9vl0Published at
2023-06-09 12:59:11Event JSON
{
"id": "cbdf3268c0ba2f611e1fde668e6decfb9f7ca7fdfe14550d7fc43691e3feb63e",
"pubkey": "84dde5d7bce077e7cd64c91dc102677e13acc29126ce3f889bb9d2b2f81b200a",
"created_at": 1686315551,
"kind": 1,
"tags": [
[
"e",
"41eb27a7e0ef742b5e7fead99779784c731238151c39031c209548edb79f0a60",
"",
"reply"
],
[
"p",
"9456f7acb763eaab2e02bd8e60cf17df74f352c2ae579dce1f1dd25c95dd611c"
]
],
"content": "📅 Original date posted:2020-03-06\n📝 Original message:\nHi,\n I was reading the paper by Poon and Dryja on Bitcoin Lightning\nNetwork and was going through the construction of HTLC. Suppose 2 parties A\nand B have a channel with each party locking 0.5 BTC. Suppose A wants to\ntransfer 0.1 BTC to B contingent to the knowledge of R : H=h(R) produced\nwithin a locktime of say t days. So the script output for A is -\n1. 0.4 BTC to A\n2. 0.5 BTC to B\n3. 0.1 BTC locked in HTLC between A \u0026 B.\nWhy we cannot set the terms as say 0.4 BTC to A, 0.2 BTC to B and 0.4 BTC\nto HTLC, where HTLC output can follow either of the paths - If B produces R\nwithin t days then it gets back 0.4 BTC else after t days A can broadcast\nwith 0.4 BTC going to the A? This prevents B from not responding (and\ninduce possibly griefing attack across a longer path by withholding the\nsolution) since it will lose out 0.3 BTC. What can be the problem if the\nterms of HTLC itself tries to enforce a penalty on the counterparty?\n\n-- \nYours sincerely,\nSubhra Mazumdar.\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/lightning-dev/attachments/20200306/6350cd37/attachment.html\u003e",
"sig": "8b004b197b867c4941634cf465f47ad6792286ffe94ca85b83e01f1ce7c65f5e86df24eef8fa32a90ea2511429ebe81a214d3609523fd2528f869f3f809bb393"
}