[Cryptography] Proof-of-Satoshi fails Proof-of-Proof.

Tony Arcieri bascule at gmail.com
Sat May 7 01:25:25 EDT 2016


On Fri, May 6, 2016 at 12:06 PM, Ron Garret <ron at flownet.com> wrote:

> > But with all forms of DH based signatures, a random number is generated
> and that affects the signature value. In effect, every signature has a salt
> value.


Interesting sidebar: ECDSA nonces were one of the sources of Bitcoin's
transaction malleability. The (massive pile of hacks that is) segregated
witness feature being added to Bitcoin has an added side effect of removing
signatures from the hash of a transaction, and with it the associated
malleability.

All that said, if you're designing a new system today, pick Ed25519.

-- 
Tony Arcieri
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20160506/4b3059ae/attachment.html>


More information about the cryptography mailing list