📅 Original date posted:2019-12-03
📝 Original message:
ZmnSCPxj <ZmnSCPxj at protonmail.com> writes:
> Good morning Rusty,
>
>> > Hi all,
>> > I recently revisited the eltoo paper and noticed some things related
>> > watchtowers that might affect channel construction.
>> > Due to NOINPUT, any update transaction can spend from any other, so
>> > in theory the tower only needs the most recent update txn to resolve
>> > any dispute.
>> > In order to spend, however, the tower must also produce a witness
>> > script which when hashed matches the witness program of the input. To
>> > ensure settlement txns can only spend from exactly one update txn,
>> > each update txn uses unique keys for the settlement clause, meaning
>> > that each state has a unique witness program.
>>
>> I didn't think this was the design. The update transaction can spend
>> any prior, with a fixed script, due to NOINPUT.
>>
>> The settlement transaction does not use NOINPUT, and thus can only
>> spend the matching update.
>
> My understanding is that this is not logically possible?
You're right, no wonder I missed this problem :(
OK, so we need to change the key(s) every time. Can we tweak it based
on something the watchtower will know, i.e. something in the update tx
itself? Obviously not the output, as that would create a circular
dependency. Is there some taproot thing we can use to insert some
noise in the input?
Cheers,
Rusty.
Rusty Russell [ARCHIVE] /
npub1zw…hkhpx
2023-06-09 12:57:33
in reply to nevent1q…nw93
Author Public Key
npub1zw7cc8z78v6s3grujfvcv3ckpvg6kr0w7nz9yzvwyglyg0qu5sjsqhkhpxPublished at
2023-06-09 12:57:33Event JSON
{
"id": "6ac73a0a2e538b4e9fa4be7b3cd7edf98e3f0a6e354d6dfba811ae0e34e2a02b",
"pubkey": "13bd8c1c5e3b3508a07c92598647160b11ab0deef4c452098e223e443c1ca425",
"created_at": 1686315453,
"kind": 1,
"tags": [
[
"e",
"4c9eebfb07afa82296aae9348e1049e58998072c2cbd84edcebce5b362e0df8f",
"",
"root"
],
[
"e",
"bed1236f8d6eb689215e21e8bb379a91ed47cf4250be43c10818af9e51441892",
"",
"reply"
],
[
"p",
"72cd40332ec782dd0a7f63acb03e3b6fdafa6d91bd1b6125cd8b7117a1bb8057"
]
],
"content": "📅 Original date posted:2019-12-03\n📝 Original message:\nZmnSCPxj \u003cZmnSCPxj at protonmail.com\u003e writes:\n\u003e Good morning Rusty,\n\u003e\n\u003e\u003e \u003e Hi all,\n\u003e\u003e \u003e I recently revisited the eltoo paper and noticed some things related\n\u003e\u003e \u003e watchtowers that might affect channel construction.\n\u003e\u003e \u003e Due to NOINPUT, any update transaction can spend from any other, so\n\u003e\u003e \u003e in theory the tower only needs the most recent update txn to resolve\n\u003e\u003e \u003e any dispute.\n\u003e\u003e \u003e In order to spend, however, the tower must also produce a witness\n\u003e\u003e \u003e script which when hashed matches the witness program of the input. To\n\u003e\u003e \u003e ensure settlement txns can only spend from exactly one update txn,\n\u003e\u003e \u003e each update txn uses unique keys for the settlement clause, meaning\n\u003e\u003e \u003e that each state has a unique witness program.\n\u003e\u003e\n\u003e\u003e I didn't think this was the design. The update transaction can spend\n\u003e\u003e any prior, with a fixed script, due to NOINPUT.\n\u003e\u003e\n\u003e\u003e The settlement transaction does not use NOINPUT, and thus can only\n\u003e\u003e spend the matching update.\n\u003e\n\u003e My understanding is that this is not logically possible?\n\nYou're right, no wonder I missed this problem :(\n\nOK, so we need to change the key(s) every time. Can we tweak it based\non something the watchtower will know, i.e. something in the update tx\nitself? Obviously not the output, as that would create a circular\ndependency. Is there some taproot thing we can use to insert some\nnoise in the input?\n\nCheers,\nRusty.",
"sig": "eb2e019e7d39824a6ab298004903a586b96d7d660b48620e9f41ecd3696cc610778d2a925c07d5aab0b7bd067606778f68ff5b32af1196f7acc3531162835e18"
}