sipa changed the topic of #bitcoin-wizards to: This channel is for discussing theoretical ideas with regard to cryptocurrencies, not about short-term Bitcoin development | http://bitcoin.ninja/ | This channel is logged. | For logs and more information, visit http://bitcoin.ninja
frankenmint has quit [Remote host closed the connection]
NewLiberty has joined #bitcoin-wizards
GAit1 has joined #bitcoin-wizards
GAit has quit [Ping timeout: 276 seconds]
NewLiberty has quit [Ping timeout: 252 seconds]
voxelot has quit [Ping timeout: 250 seconds]
tromp_ has quit [Read error: Connection reset by peer]
tromp_ has joined #bitcoin-wizards
dnaleor has joined #bitcoin-wizards
RoboTeddy has joined #bitcoin-wizards
OP_PUSH has joined #bitcoin-wizards
RoboTeddy has quit [Ping timeout: 244 seconds]
DougieBot5000 has quit [Quit: Leaving]
DougieBot5000 has joined #bitcoin-wizards
AaronvanW_ has joined #bitcoin-wizards
AaronvanW has quit [Ping timeout: 276 seconds]
NewLiberty has joined #bitcoin-wizards
belcher has quit [Ping timeout: 260 seconds]
tr0nk has quit [Ping timeout: 252 seconds]
wallet42 has quit [Quit: Leaving.]
wallet42 has joined #bitcoin-wizards
tr0nk has joined #bitcoin-wizards
Starduster has joined #bitcoin-wizards
voxelot has joined #bitcoin-wizards
frankenmint has joined #bitcoin-wizards
AaronvanW_ has quit [Ping timeout: 276 seconds]
frankenmint has quit [Ping timeout: 276 seconds]
notj has joined #bitcoin-wizards
notj has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
tr0nk has quit [Ping timeout: 240 seconds]
davec has quit [Ping timeout: 240 seconds]
NewLiberty has quit [Ping timeout: 252 seconds]
hashtagg_ has quit [Read error: Connection reset by peer]
laurentmt has joined #bitcoin-wizards
tr0nk has joined #bitcoin-wizards
davec has joined #bitcoin-wizards
sCOGSBY has quit [Ping timeout: 268 seconds]
Ylbam has quit [Quit: Connection closed for inactivity]
wallet42 has quit [Quit: Leaving.]
wasi has joined #bitcoin-wizards
laurentmt has quit [Quit: laurentmt]
OP_PUSH has quit [Ping timeout: 250 seconds]
sausage_factory has quit [Ping timeout: 260 seconds]
CubicEarth has joined #bitcoin-wizards
CubicEarth has quit [Remote host closed the connection]
CubicEarth has joined #bitcoin-wizards
Alopex has quit [Remote host closed the connection]
GAit1 has quit [Read error: Connection reset by peer]
GAit has joined #bitcoin-wizards
wasi has quit [Excess Flood]
Alopex has joined #bitcoin-wizards
wasi has joined #bitcoin-wizards
dEBRUYNE has joined #bitcoin-wizards
GAit has quit [Client Quit]
priidu has joined #bitcoin-wizards
<kanzure> OxADADA: nsh: thank you
Burrito has quit [Ping timeout: 244 seconds]
voxelot has quit [Remote host closed the connection]
priidu has quit [Ping timeout: 248 seconds]
CubicEarth has quit [Remote host closed the connection]
Alopex has quit [Remote host closed the connection]
frankenmint has joined #bitcoin-wizards
dEBRUYNE has quit [Quit: Leaving]
CubicEarth has joined #bitcoin-wizards
Alopex has joined #bitcoin-wizards
NewLiberty has joined #bitcoin-wizards
frankenmint has quit [Ping timeout: 252 seconds]
everyBloc has joined #bitcoin-wizards
everyBlo_ has quit [Read error: Connection reset by peer]
CubicEarth has quit [Remote host closed the connection]
domwoe has joined #bitcoin-wizards
adlai has quit [Read error: Connection reset by peer]
CubicEarth has joined #bitcoin-wizards
adlai has joined #bitcoin-wizards
jtimon has quit [Ping timeout: 240 seconds]
TheSeven has quit [Ping timeout: 268 seconds]
CubicEarth has quit [Remote host closed the connection]
wallet42 has joined #bitcoin-wizards
TheSeven has joined #bitcoin-wizards
CubicEarth has joined #bitcoin-wizards
tromp_ has quit [Ping timeout: 260 seconds]
ThomasV has joined #bitcoin-wizards
Emcy_ has quit [Ping timeout: 276 seconds]
tromp_ has joined #bitcoin-wizards
CubicEarth has quit [Remote host closed the connection]
Giszmo has quit [Quit: Leaving.]
CubicEarth has joined #bitcoin-wizards
AusteritySucks has joined #bitcoin-wizards
CubicEarth has quit [Read error: Connection reset by peer]
CubicEarth has joined #bitcoin-wizards
CubicEarth has quit [Remote host closed the connection]
CubicEarth has joined #bitcoin-wizards
[_smitty] has quit [Ping timeout: 240 seconds]
CubicEarth has quit [Remote host closed the connection]
domwoe has quit [Remote host closed the connection]
CubicEarth has joined #bitcoin-wizards
jaekwon_ has quit [Ping timeout: 240 seconds]
jaekwon_ has joined #bitcoin-wizards
CubicEarth has quit [Remote host closed the connection]
CubicEarth has joined #bitcoin-wizards
NewLiberty has quit [Ping timeout: 248 seconds]
frankenmint has joined #bitcoin-wizards
frankenmint has quit [Ping timeout: 276 seconds]
p15x has joined #bitcoin-wizards
wallet42 has quit [Quit: Leaving.]
CubicEarth has quit [Remote host closed the connection]
Alopex has quit [Remote host closed the connection]
Alopex has joined #bitcoin-wizards
CubicEarth has joined #bitcoin-wizards
CubicEarth has quit [Remote host closed the connection]
wasi has quit [Excess Flood]
jtimon has joined #bitcoin-wizards
irc88 has quit [Ping timeout: 248 seconds]
wasi has joined #bitcoin-wizards
jaekwon_ has quit [Remote host closed the connection]
ThomasV has quit [Ping timeout: 240 seconds]
azariah has quit [Ping timeout: 252 seconds]
azariah has joined #bitcoin-wizards
[Derek] has quit [Max SendQ exceeded]
[Derek] has joined #bitcoin-wizards
[Derek] is now known as Guest86706
wasi has quit [Quit: Leaving]
voxelot has joined #bitcoin-wizards
gielbier has quit [Quit: Leaving]
Don_John has quit [Read error: Connection reset by peer]
azariah has quit [Ping timeout: 244 seconds]
tromp has quit [Remote host closed the connection]
grassass has joined #bitcoin-wizards
crossing-styx has quit [Ping timeout: 276 seconds]
everyBloc has quit [Remote host closed the connection]
CubicEarth has joined #bitcoin-wizards
murch has joined #bitcoin-wizards
priidu has joined #bitcoin-wizards
Starduster has quit [Read error: Connection reset by peer]
Starduster has joined #bitcoin-wizards
azariah has joined #bitcoin-wizards
frankenmint has joined #bitcoin-wizards
frankenmint has quit [Ping timeout: 244 seconds]
Alopex has quit [Remote host closed the connection]
Alopex has joined #bitcoin-wizards
ThomasV has joined #bitcoin-wizards
tromp has joined #bitcoin-wizards
crossing-styx has joined #bitcoin-wizards
RoboTeddy has joined #bitcoin-wizards
tromp has quit [Ping timeout: 240 seconds]
<nsh> the bitcoincore slack wasn't a joke? :/
<fluffypony> Why is everyone obsessed with Slack?
<fluffypony> I mean, it's great for small teams, but horrible for public interaction
RoboTeddy has quit [Ping timeout: 268 seconds]
<nsh> it's just better than alternatives. which is nothing but an indictment of previous efforts :)
<fluffypony> Now now
<fluffypony> Let's not reject IRC+ZNC just yet
<fluffypony> It's worked well for like 25 years... :)
<nsh> yeah, i think irc has just been waiting for something like a browser but not evidently the product of satan before evolving rich inline content
<fluffypony> All the IRC clients I use support inline URl expansion, so there's that
frankenmint has joined #bitcoin-wizards
frankenmint has quit [Remote host closed the connection]
frankenmint has joined #bitcoin-wizards
GreenIsMyPepper has quit [Ping timeout: 250 seconds]
CubicEarth has quit []
GreenIsMyPepper has joined #bitcoin-wizards
bit2017 has quit [Ping timeout: 260 seconds]
freekevin has quit [Ping timeout: 248 seconds]
Myagui has quit [Ping timeout: 240 seconds]
shesek has quit [Ping timeout: 248 seconds]
AaronvanW_ has joined #bitcoin-wizards
Emcy_ has joined #bitcoin-wizards
freekevin has joined #bitcoin-wizards
bit2017 has joined #bitcoin-wizards
freekevin has quit [Client Quit]
voxelot has quit [Ping timeout: 248 seconds]
p15x_ has joined #bitcoin-wizards
p15x has quit [Ping timeout: 246 seconds]
azariah has quit [Ping timeout: 240 seconds]
p15x_ has quit [Ping timeout: 250 seconds]
p15x_ has joined #bitcoin-wizards
azariah has joined #bitcoin-wizards
CrazyTruthYakDDS has quit [Quit: Connection closed for inactivity]
Guyver2 has joined #bitcoin-wizards
Guyver2 has quit [Client Quit]
LeMiner has quit [Read error: Connection reset by peer]
ManfredMacx has joined #bitcoin-wizards
LeMiner has joined #bitcoin-wizards
tucenaber has joined #bitcoin-wizards
ThomasV has quit [Ping timeout: 248 seconds]
ThomasV has joined #bitcoin-wizards
dEBRUYNE has joined #bitcoin-wizards
<MRL-Relay> [smooth] win6
phiche has joined #bitcoin-wizards
tromp has joined #bitcoin-wizards
phiche1 has joined #bitcoin-wizards
arowser has quit [Quit: No Ping reply in 180 seconds.]
arowser has joined #bitcoin-wizards
tromp has quit [Ping timeout: 244 seconds]
phiche has quit [Ping timeout: 244 seconds]
supasonic has quit [Ping timeout: 260 seconds]
Ylbam has joined #bitcoin-wizards
ThomasV has quit [Ping timeout: 248 seconds]
phiche has joined #bitcoin-wizards
phiche1 has quit [Read error: No route to host]
melvster has quit [Ping timeout: 244 seconds]
melvster has joined #bitcoin-wizards
merlincorey has quit [Read error: Connection reset by peer]
merlincorey has joined #bitcoin-wizards
jeamy has quit [Quit: leaving]
jtimon has quit [Ping timeout: 268 seconds]
qbase has joined #bitcoin-wizards
tromp has joined #bitcoin-wizards
qbase has quit [Client Quit]
tromp has quit [Ping timeout: 240 seconds]
phiche1 has joined #bitcoin-wizards
ThomasV has joined #bitcoin-wizards
phiche has quit [Ping timeout: 246 seconds]
malte has quit [Remote host closed the connection]
malte has joined #bitcoin-wizards
ManfredMacx has quit [Quit: Leaving]
belcher has joined #bitcoin-wizards
belcher has quit [Changing host]
belcher has joined #bitcoin-wizards
phiche has joined #bitcoin-wizards
phiche1 has quit [Ping timeout: 244 seconds]
phiche has quit [Read error: Connection reset by peer]
phiche2 has joined #bitcoin-wizards
bit2017 has quit [Ping timeout: 260 seconds]
OP_PUSH has joined #bitcoin-wizards
tr0nk has quit [Ping timeout: 244 seconds]
blackwraith has joined #bitcoin-wizards
p15x_ has quit [Ping timeout: 246 seconds]
priidu has quit [Ping timeout: 244 seconds]
qwerty777 has joined #bitcoin-wizards
<qwerty777> Donate me please a new PC)1Nuj3pwSaXn4GE2WoVEAiDKTaPozo4mpVX)sorry and thanks)
OP_PUSH has quit [Quit: leaving]
<fluffypony> qwerty777: NO, stop it now
Giszmo has joined #bitcoin-wizards
tromp has joined #bitcoin-wizards
sausage_factory has joined #bitcoin-wizards
bit2017 has joined #bitcoin-wizards
<qwerty777> ok)
qwerty777 has left #bitcoin-wizards [#bitcoin-wizards]
blackwraith has quit [Ping timeout: 276 seconds]
tromp has quit [Ping timeout: 248 seconds]
Guest86706 is now known as [Derek]
[Derek] has quit [Changing host]
[Derek] has joined #bitcoin-wizards
tr0nk has joined #bitcoin-wizards
hashtag has joined #bitcoin-wizards
Burrito has joined #bitcoin-wizards
p15x has joined #bitcoin-wizards
phiche has joined #bitcoin-wizards
phiche2 has quit [Ping timeout: 244 seconds]
NewLiberty has joined #bitcoin-wizards
melvster has quit [Ping timeout: 276 seconds]
NewLiberty has quit [Ping timeout: 250 seconds]
andytoshi has joined #bitcoin-wizards
N0S4A2 has quit [Quit: WeeChat 1.4]
tromp has joined #bitcoin-wizards
N0S4A2 has joined #bitcoin-wizards
Yoghur114 has joined #bitcoin-wizards
melvster has joined #bitcoin-wizards
Yoghur114 has quit [Remote host closed the connection]
waxwing has quit [Read error: Connection reset by peer]
waxwing has joined #bitcoin-wizards
tr0nk has quit [Ping timeout: 250 seconds]
tr0nk has joined #bitcoin-wizards
NewLiberty has joined #bitcoin-wizards
paveljanik has joined #bitcoin-wizards
jtimon has joined #bitcoin-wizards
gielbier has joined #bitcoin-wizards
gielbier has quit [Changing host]
gielbier has joined #bitcoin-wizards
zooko has joined #bitcoin-wizards
p15x has quit [Quit: Textual IRC Client: www.textualapp.com]
zooko has quit [Ping timeout: 260 seconds]
psztorc_ has joined #bitcoin-wizards
laurentmt has joined #bitcoin-wizards
psztorc has quit [Ping timeout: 268 seconds]
laurentmt has quit [Client Quit]
dEBRUYNE_ has joined #bitcoin-wizards
dEBRUYNE has quit [Ping timeout: 244 seconds]
jeamy has joined #bitcoin-wizards
<kanzure> using channel #mit-dci for mit bitcoin expo 2016
chjj has quit [Ping timeout: 264 seconds]
ozanyurt has joined #bitcoin-wizards
<tromp> gmaxwell: i tested all the highwayhash implementations in my setting, and all were slower than my current siphash implementation
chjj has joined #bitcoin-wizards
Yoghur114 has joined #bitcoin-wizards
ozanyurt has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
tr0nk has quit [Ping timeout: 244 seconds]
supasonic has joined #bitcoin-wizards
voxelot has joined #bitcoin-wizards
tr0nk has joined #bitcoin-wizards
Eliel has quit [Remote host closed the connection]
Eliel has joined #bitcoin-wizards
ozanyurt has joined #bitcoin-wizards
AusteritySucks has quit [Quit: Leaving]
Giszmo has quit [Quit: Leaving.]
rht___ has joined #bitcoin-wizards
rht___ has quit [Client Quit]
_rht has joined #bitcoin-wizards
<jeremyrubin> quick question: has anyone have handy analysis on security of something like `reduce(xor, [hash(d) for d in data])`? at what `len(data)` does it break down?
<jeremyrubin> Ie, how does xor compare to merkle tree.
ThomasV has quit [Ping timeout: 246 seconds]
nuke1989 has joined #bitcoin-wizards
<maaku> jeremyrubin at Len=2
<maaku> Xor is never secure
donhuan has joined #bitcoin-wizards
Don_John has joined #bitcoin-wizards
[d__d] has quit [Remote host closed the connection]
[d__d] has joined #bitcoin-wizards
Don_John has quit [Max SendQ exceeded]
<jeremyrubin> No way?
Don_John has joined #bitcoin-wizards
<gmaxwell> jeremyrubin: it's trivially insecure. you can use a simple algorithim to find a collission, with lots of inputs.
<gmaxwell> (e.g. block lanczos)
<Aleph0> xor never secure? you can xor plain text with the same length of random data, and thats considered secure, afaik.
Don_John_ has joined #bitcoin-wizards
hashtag has quit [Ping timeout: 252 seconds]
<nsh> Aleph0, not as the 'hash' function for a merkle tree
<jeremyrubin> Aleph0: was for a different thing
Don_John has quit [Ping timeout: 248 seconds]
<nsh> [sorry, as the combining function in a merkle tree (which requires the property of a strong hash function)]
<gmaxwell> jeremyrubin: toy example, first genrate lots of data, a couple times the length of the hash in bits. Then pair them up to cancel out bit 0.. you now have a bigger colection of values which is all 0 for bit 1... then pair up the pairs to cancel out bit 1 and so on. this is an inefficient algorthim but it shows the insecurity.
hashtag has joined #bitcoin-wizards
merlincorey has quit [Read error: Connection reset by peer]
davec has quit [Read error: Connection reset by peer]
davec has joined #bitcoin-wizards
<jeremyrubin> gmaxwell: cool, thanks
<jeremyrubin> I'm still curious as to what a closed form lower bound might be
<jeremyrubin> but maybe it's a fools errand
<jeremyrubin> thanks for the reference to block lanczos
<gmaxwell> tromp: interesting, the authors were claiming it was faster at all sizes.
<jeremyrubin> (for the use case I'm thinking of, it would be ok to have a hash that is much longer, the out-of-order property is what's important)
zooko has joined #bitcoin-wizards
<tromp> gmaxwell: faster than the reference siphash impl perhaps
<jeremyrubin> I guess in terms of asking the question I am really trying to ask, are there "out of order" merkle-like sets? It would need to be a deterministic function of course.
merlincorey has joined #bitcoin-wizards
<gmaxwell> tromp: hm. perhaps they made it sound like they were saying that it was faster than a highly optimized implementation.
<gmaxwell> jeremyrubin: there are, using number theoretic hash operations, which have large hashes and or are slow.
<tromp> gmaxwell: their plain siphash impl was about 5 to 10% slower than mine. i can send you the code i used
<gmaxwell> (and many don't admit efficient membership proofs)
donhuan has quit [Quit: Leaving]
<nsh> hmm
<nsh> wouldn't that be an accumulator?
<gmaxwell> nsh: yes.
<nsh> (the hash-function is chosen to be quasicommutative so that the order of entry/reduction is irrelevant)
* nsh nods
<Madars> jeremyrubin: for an even easier solution -- it breaks down using just plain Gaussian elimination. once #blocks > hash_output_size_in_bits, you are busted
everyBloc has joined #bitcoin-wizards
wallet42 has joined #bitcoin-wizards
molz has quit [Ping timeout: 240 seconds]
voxelot has quit [Ping timeout: 268 seconds]
moli has joined #bitcoin-wizards
<jeremyrubin> I think accumulator doesn't have the property of being constructable identically?
<jeremyrubin> eg, can you have Alice and Bob both construct accumulators and compare if they have the same data without having to query each item?
warbrain has quit [Read error: Connection reset by peer]
<Madars> that is not required by completeness/soundness of the acumulator, but, in fact, many accumulators achieve it.
<Madars> e.g. RSA accumulator does achieve it
jaekwon has joined #bitcoin-wizards
<zooko> maaku: thanks for your advice!
<zooko> maaku: I don't think it is correct that botnets dominated Bitcoin mining. I investigated it at the time, and it was substantial, but not dominant.
crossing-styx has quit [Ping timeout: 250 seconds]
<zooko> I have my notes (because I posted them publicly, which is apparently the only way I can keep track of notes over time).
<zooko> If you carwe.
<zooko> maaku: at the moment I'm thinking that I'm going to have to allow a degree of GPU-friendliness in order to get the other things that I require: low risk of a breakthrough, soon deployment, and cheap verification.
<zooko> Hey, what are y'all talking about? That sounds interesting.
* zooko goes to the logs...
<nsh> a breakthrough?
<zooko> nsh: low risk that someone will come up with a substantially cheaper method of mining.
* nsh nods
<nsh> good luck bounding progress with friendliness :)
<zooko> nsh: I don't understand!
<nsh> i mean something like allowing GPU-friendliness doesn't entail a guarantee against progress, all else considered equal
<nsh> against *rapid progress
<zooko> By "progress" do you mean devising more efficient methods of mining?
* nsh nods
<zooko> Or do you mean the "progress" in "progress freedom" as a criterion of PoW algorithms?
<zooko> Okay, so I didn't mean to imply that GPU-friendliness *helps* against such breakthroughs.
<nsh> right, pardon my misinterpretation
<zooko> It's just that to get all of those desiderata, I have to pick from a small number of options,
<zooko> and none of the options currently offer all of that *and* GPU-resistance, AFAICT.
* nsh nods
<nsh> what are the options currently?
<zooko> Whereas some offer (better, arguably) GPU-resistance but don't offer the rest, namely cheap verification.
<zooko> nsh: SHA256d, some other hashcash, Cuckoo, Argon2d, Equihash, scrypt
<zooko> I love this topic but unfortunately I have to go shopping now. :-) I'll catch up by looking at the public logs when I return...
<nsh> enjoy :)
<zooko> "Equihash" is my current favorite, and it is also known as Biryukov & Khovratovich Generalized Birthday Problem
<nsh> (s/oy/ure/ as appropriate)
<zooko> bye!
<nsh> Asymmetric proof-of-work based on the Generalized Birthday problem -- https://eprint.iacr.org/2015/946
zooko has quit [Ping timeout: 244 seconds]
<nsh> "To make it amortization-free, we develop the technique called algorithm binding by exploiting the fact that Wagner's algorithm carries its footprint on a solution."
<nsh> any idea what this means?
ozanyurt has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
sCOGSBY has joined #bitcoin-wizards
RoboTeddy has joined #bitcoin-wizards
<tromp_> they want to force you to use a specific algorithm to solve a cleanly defined problem
<tromp_> because they think they can prove minimum resource bounds for that algorithm
<arubi> nsh, this sounds like "momentum" in protoshares
<tromp_> so they force you by requiring extra output specific to that algorithm
<arubi> actually... ctrl+f "momentum" yields 7..
<nsh> ah
<tromp_> anyway that's the impression i got
* nsh nods
<gmaxwell> tromp_: thats what the text there sounds like to me.
RoboTeddy has quit [Ping timeout: 250 seconds]
<tromp_> it's like they try to cover up the ugliness by naming it as a technique:)
psztorc_ has quit [Ping timeout: 260 seconds]
<gmaxwell> I don't know how one efficiently verifies such a thing; at least for arbritary algorithims... unless they're saving the whole execution trace so the verifier can sample it.
<tromp_> gmaxwell: i added my own siphash impl as a new entry in the highwayhash benchmark suite, and when fixing all sizes to 8 bytes, it yields:
<tromp_> ScalarSipTreeHash 8 sum=17034630523489198832 GBps=0.10 c/b=36.57
<tromp_> ScalarHighwayTreeHash 8 sum=6451096015771023257 GBps=0.06 c/b=60.86
<tromp_> SipHash 8 sum=7421369594465530093 GBps=0.64 c/b=5.49
<tromp_> MySipHash 8 sum=7421369594465530093 GBps=0.84 c/b=4.15
<tromp_> SipTreeHash 8 sum=17034630523489198832 GBps=0.17 c/b=20.60
<tromp_> HighwayTreeHash 8 sum=6451096015771023257 GBps=0.67 c/b=5.26
<tromp_> so you see MySipHash being the fastest
<gmaxwell> indeed! and yours is compatible with the oriinal sipahash.
<tromp_> yes, good to see matching checksum:)
<tromp_> if i wanted a faster hash, i'd change siphash-2-4 into siphash-1-2 with only half the rounds
<tromp_> hmm, let me bench that one...
<tromp_> it becomes MySipHash 8 sum=12676441542898061366 GBps=1.43 c/b=2.45
ozanyurt has joined #bitcoin-wizards
dnaleor has quit [Quit: Leaving]
AusteritySucks has joined #bitcoin-wizards
frankenmint has quit [Remote host closed the connection]
frankenmint has joined #bitcoin-wizards
frankenmint has quit [Remote host closed the connection]
ThomasV has joined #bitcoin-wizards
hashtag has quit [Ping timeout: 252 seconds]
psztorc has joined #bitcoin-wizards
psztorc_ has joined #bitcoin-wizards
frankenmint has joined #bitcoin-wizards
psztorc has quit [Ping timeout: 268 seconds]
sipi has joined #bitcoin-wizards
nuke1989 has quit [Remote host closed the connection]
hashtag has joined #bitcoin-wizards
blackwraith has joined #bitcoin-wizards
sausage_factory has quit [Ping timeout: 264 seconds]
supasonic has quit [Ping timeout: 260 seconds]
ozanyurt has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
buZz has quit [Ping timeout: 260 seconds]
buZz has joined #bitcoin-wizards
buZz is now known as Guest56642
Guest56642 is now known as buZz
crossing-styx has joined #bitcoin-wizards
supasonic has joined #bitcoin-wizards
AaronvanW_ has quit [Read error: Connection reset by peer]
AaronvanW has joined #bitcoin-wizards
murch has quit [Ping timeout: 244 seconds]
murch has joined #bitcoin-wizards
frankenmint has quit [Remote host closed the connection]
frankenmint has joined #bitcoin-wizards
phiche1 has joined #bitcoin-wizards
phiche2 has joined #bitcoin-wizards
phiche1 has quit [Read error: Connection reset by peer]
phiche has quit [Ping timeout: 244 seconds]
ozanyurt has joined #bitcoin-wizards
ozanyurt has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
Guyver2 has joined #bitcoin-wizards
jcorgan has quit [Quit: ZNC - 1.6.0 - http://znc.in]
voxelot has joined #bitcoin-wizards
dnaleor has joined #bitcoin-wizards
tr0nk has quit [Ping timeout: 250 seconds]
koshii has quit [Ping timeout: 276 seconds]
koshii has joined #bitcoin-wizards
laurentmt has joined #bitcoin-wizards
laurentmt has quit [Client Quit]
Keefe_ is now known as Keefe
andytoshi has quit [Read error: Connection reset by peer]
moa has joined #bitcoin-wizards
NewLiberty has quit [Ping timeout: 250 seconds]
HostFat_ has joined #bitcoin-wizards
HostFat_ has quit [Read error: Connection reset by peer]
dEBRUYNE_ is now known as dEBRUYNE
gielbier has quit [Ping timeout: 260 seconds]
murch has quit [Quit: Leaving.]
<pigeons> zooko: why is scrypt considered? which criteon of an ideal PoW hash does it meet?
<tromp_> the only reason not to choose sha256 is to try avoid asics
<tromp_> hashcash with scrypt is a complicated way to fail achieving that
CrazyTruthYakDDS has joined #bitcoin-wizards
<tromp_> at this point i also have to question zooko's sanity
psztorc has joined #bitcoin-wizards
psztorc_ has quit [Read error: Connection reset by peer]
psztorc_ has joined #bitcoin-wizards
sipi has quit [Quit: Leaving]
psztorc has quit [Ping timeout: 248 seconds]
AusteritySucks has quit [Ping timeout: 246 seconds]
psztorc has joined #bitcoin-wizards
psztorc_ has quit [Ping timeout: 240 seconds]
<gmaxwell> pigeons: scrypt has some pretty bad TMTOs that admit efficient asics; so basically they're more expensive to design fast circuits for, but still relatively cheap to produce fast circuits. The effect in theory, and -- it seems-- practice is that there are fewer vendors of fast asics which you cannot economically mine without.
<gmaxwell> which is pretty much a worst case outcome for something hoping to improve equality of access.
AusteritySucks has joined #bitcoin-wizards
<gmaxwell> Best case: ordinary computers are as good as the best custom hardware; next best is that custom hardware is better BUT it's maximally easy to produce so there is ample competition in that business; worst is that custom hardware is superior and making competative custom hardware is hard (or even restricted by patents) so there is a near monopoly in it.
NewLiberty has joined #bitcoin-wizards
<gmaxwell> I'm of the (far from proven opinion) that criteria #1 is not meaningfully possible for profitable mining-pow (because competition means that eventually even a small advantage will favor custom hardware)-- and as a result one should probably spend effort avoiding #3 even if it reduces the odds of achieving #1. But regardless, under this framework scrypt is probably a strict loser.
<gmaxwell> Also, the symmetrical verification cost of the litecoin style scrypt is pretty awful; it's much easier to dos attack litecoin nodes and mining pools because the POW is thousands of times slower to verify than sha256^2. Fortunately for litecoin and friends few people care to dos attack them, but that doesn't make it a good design.
phiche2 has quit [Quit: Leaving.]
Yoghur114 has quit [Remote host closed the connection]
<Aleph0> is it possible to construct a lottery scheme where a winning node would be determined by the somewhat random latencies between nodes in the network?
<Aleph0> this way every node is a mining node, and the more nodes you have, the higher are your chances of winning, stimulating interest in maintaining more and more of full nodes?
<nsh> short answer: no, with a but. long answer: the but was also a no
<nsh> (the hash lottery is verifiable by all network participants. network jitter can be faked, can't be easily proved or verified)
Guyver2 has quit [Quit: :)]
<nsh> any source of entropy for network role attribution has to be oracular, i would venture
shesek has joined #bitcoin-wizards
<gmaxwell> Aleph0: question is underdefined; but I think even using an expasive view of what you're asking no such scheme would be simulation resistant... meaning that someone who was offline couldn't tell if the history they saw was totally forged or not. Generally things that aren't immune to simulation are also not convergent in real (asynchronous) networks... the asynchronicity of the participants is eq
<gmaxwell> uivilent to the participants randomly joining and leaving... they'll get different views of the network and not agree.
aknix has joined #bitcoin-wizards
<gmaxwell> Aleph0: besides, someone spinning up a bunch of nodes does nothing of value for the network; the opposite, in fact-- doing so would be effectively a sybil attack.
<nsh> (what we do desire is diversity of node operators, but we can't easily proxy-measure that through number of nodes)
<Aleph0> nsh: or at least that every node is a mining node, that would be a good start.
<gmaxwell> Aleph0: when you hear about people expressing concern about the decline of node count, it's not a concern related to capacity-- because of how bitcoin works, it would function fine with just a couple nodes, better in fact-- the concern is related to the lost of independant/autotonymous verification-- that people are trusting third parties rather than enforcing the rules themselves.
<Aleph0> diversity operators cannot be possibly proven. how would you ever know who ruks what nodes?
<Aleph0> diversity of operators*
<gmaxwell> so if the incentives are setup to encourage a single party to run many nodes, then that doesn't help-- and it hurts by potentially making things look more diverse than they are, and increasing the risk that someone making random connections ends up partitioned from everyone else by a single party.
<gmaxwell> Aleph0: you can't really measure it but absent any incentive for a party to spin up a lot of nodes; counting gives a first order approximation.
<Aleph0> gmaxwell: i dont think the absolute number of nodes is all that important. if every single node is also a profitably mining node - its a much better situation.
<nsh> it satisfices that there is not an obvious monoculture of transaction verification.
<Aleph0> this way it would be rather difficult to sway miners opinions.
<gmaxwell> Aleph0: again, all that would do is incentivize sybil attacks (assuming it worked at all), you wouldn't get more nodes but just "nodes". The whole invention of mining is a solution to the sybil problems on open and decenteralized networks.
<gmaxwell> (while trying to think about improving something about mining it's critical to keep in mind what mining exists for in the first place!)
joesmoe has joined #bitcoin-wizards
<Aleph0> my interest is in finding areas where diseconomies of scale prevent centralization of resources.
<Aleph0> i can only think of communication between nodes being a source of such diseconomies.
<gmaxwell> thats great, but there is no such diseconomy in communication between nodes.
<gmaxwell> (after all, one can always simulate more nodes with worse communication between them)
blockzombie has joined #bitcoin-wizards
<Aleph0> its not about better or worse communication. its just that the network complexity goes up very rapidly witn increasing number of nodes.
<Aleph0> bug i guess you can simulate any arbitrary situation like that.
<Aleph0> heh, boils down to a proof of work of sorts in the end anyway.
ThomasV has quit [Ping timeout: 248 seconds]
psztorc has quit [Ping timeout: 268 seconds]
joesmoe_ has joined #bitcoin-wizards
psztorc has joined #bitcoin-wizards
joesmoe has quit [Ping timeout: 240 seconds]
NewLiberty has quit [Ping timeout: 264 seconds]
psztorc_ has joined #bitcoin-wizards
NewLiberty has joined #bitcoin-wizards