-
Notifications
You must be signed in to change notification settings - Fork 28
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
minor edits #106
base: master
Are you sure you want to change the base?
minor edits #106
Conversation
@@ -51,6 +51,151 @@ satisfied or after a timeout. | |||
5. **Transaction Broadcast** - The coordinator broadcasts the transaction and waits | |||
for confirmation in a block. | |||
|
|||
Timeouts are considered a failure except during input registration, where the |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
All of this section must have been added by mistake. It should be removed.
|
||
Timeouts are considered a failure except during input registration, where the | ||
round may still proceed if a sufficient number of participants have joined. | ||
Failure during any phase will cause the round as a whole to fail, apart from | ||
output registration which unconditionally proceeds to the signing phase in | ||
order to assign blame. Signed inputs reveal that a user executed the protocol | ||
honestly, allowing faulty/malicious users to be excluded from a re-attempted | ||
round. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You mean this?
Timeouts are considered a failure except during input registration, where the | |
round may still proceed if a sufficient number of participants have joined. | |
Failure during any phase will cause the round as a whole to fail, apart from | |
output registration which unconditionally proceeds to the signing phase in | |
order to assign blame. Signed inputs reveal that a user executed the protocol | |
honestly, allowing faulty/malicious users to be excluded from a re-attempted | |
round. |
account for traffic analysis-based attacks, and that the structure of the | ||
CoinJoin transaction provide sufficient privacy against passive observers. | ||
|
||
This leaves Sybil attacks by other users or the coordinator, and attacks by the coordinator such as targeted denial of service by the coordinator for the purpose of deanonymization (e.g., facilitating an intersection attack on specific input or output registrations) or timing analysis. Sybil attacks by users or the coordinator have a liquidity requirement cost requirements depending on Bitcoin network fees. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This row is confusing
|
||
#### `EncryptedUnsignedCoinJoin` | ||
|
||
When a participant registers an output, the coordinator gives an `UnsignedTransactionSecret` as response. With this, during the signing phase, the participant can decrypt the `EncryptedUnsignedCoinJoin` to sign it. This ensures only the participants of a round learn the CoinJoin before it is broadcast. This feature is not strictly necessary. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
When a participant registers an output, the coordinator gives an `UnsignedTransactionSecret` as response. With this, during the signing phase, the participant can decrypt the `EncryptedUnsignedCoinJoin` to sign it. This ensures only the participants of a round learn the CoinJoin before it is broadcast. This feature is not strictly necessary. | |
When a participant registers an output, the coordinator gives an `UnsignedTransactionSecret` as response. With this, during the signing phase, the participant can decrypt the `EncryptedUnsignedCoinJoin` to sign it. This ensures only the participants of a round learn about the coinjoin before it is broadcast. This feature is not strictly necessary. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please break these down into tiny pull requests.
No description provided.