Evolving the Ark protocol using CTV and CSFS

Posted by roasbeef

Apr 15, 2025/23:26 UTC

The email discusses the intricacies and potential issues surrounding the implementation of rebindable signatures within the Ark design, specifically using CTV+CSFS. It raises concerns regarding the security and practicality of message signing processes, highlighting the risk of replay attacks if messages are not constructed with care. The necessity for user interaction during transactions is questioned, outlining the steps required for users to complete a transaction, such as obtaining new public keys, acquiring updated VTXO+connector trees, and securing a signature on the new VTXO from the receiver. There's speculation about whether these processes rely too heavily on a trusted server to manage information transmission or if they operate under the assumption that the statechains' security model suffices for all transactions.

Further examination is given to the technical challenges of implementing CTV, particularly in relation to constructing rounds and the "root" CTV hash's unknown status until all participants have provided their parameters. This leads to a discussion on the necessity for users to remain online throughout this process to ensure their ability to exit by signing their leaf. Questions are raised about the feasibility of signing for a new exit transaction when its existence and details depend on yet-to-be-determined participant contributions.

The conversation also delves into the specifics of NO_INPUT/APO capabilities, contrasting them with the proposed model by noting the absence of a dependency on the outpoint, which allows for more flexibility in the signing process. Concerns are presented regarding how users can pre-sign exit transactions without definitive knowledge of the deducted fees or the details of new transactions, especially in scenarios where SIGHASH_ALL is assumed, further complicating the refund transaction process due to uncertainties about the new second input. These points underscore the complexities and potential logistical hurdles involved in the proposed use of CTV+CSFS within the context of statechain security models and transaction protocols.

Link to Raw Post
Bitcoin Logo

TLDR

Join Our Newsletter

We’ll email you summaries of the latest discussions from authoritative bitcoin sources, like bitcoin-dev, lightning-dev, and Delving Bitcoin.

Explore all Products

ChatBTC imageBitcoin searchBitcoin TranscriptsSaving SatoshiBitcoin Transcripts Review
Built with 🧡 by the Bitcoin Dev Project
View our public visitor count

We'd love to hear your feedback on this project?

Give Feedback