bitcoin-dev
Continuing the discussion about noinput / anyprevout
Posted on: October 1, 2019 15:35 UTC
In this conversation, ZmnSCPxj and Christian discuss the implementation of Decker-Russell-Osuntokun.
They mention a standard MuSig 2-of-2 bip-schnorr SegWit v1 Funding Transaction Output, a "translator transaction," and an update transaction signed with SIGHASH_NOINPUT spending the output. They also discuss using trigger transactions to separate timeout start and the actual update/settlement pairs. ZmnSCPxj argues that trigger transactions are not necessary for Decker-Russell-Osuntokun. The two also discuss using plain bip-schnorr-signed outputs in cooperative cases to increase anonymity sets. They consider whether off-chain payment networks can keep outputs as unidentifiable as possible since they gossip about the existence of channels. They note that Lightning supports unpublished channels and channels that have been cooperatively closed are no longer widely gossiped. Finally, ZmnSCPxj highlights the importance of striving for ideal cases even if they cannot be fully achieved.