<oembed><type>rich</type><version>1.0</version><title>lisa neigut [ARCHIVE] wrote</title><author_name>lisa neigut [ARCHIVE] (npub1sp…s64t2)</author_name><author_url>https://yabu.me/npub1sprhp66c693av0c0n9had046hcdcckp2th25fnmphwstc5e4wg9qxs64t2</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>📅 Original date posted:2020-02-12&#xA;📝 Original message:&#xA;&gt; Probably so that address reuse is not dinged, i.e. I have two UTXOs with&#xA;the same address and want to make two different channels with different&#xA;peers.&#xA;&#xA;Having 2 utxos locked to the same pubkey will map to a single H2 value&#xA;though, which is what is used to flag utxo reuse. With a PoDLE you&#39;re&#xA;proving that you have a *key* for a utxo; the verifier checks that the key&#xA;you say you know does in fact map to controlling the utxo that you say it&#39;s&#xA;attached to. Whether or not you added the utxo to the signature commitment&#xA;doesn&#39;t add anything to the security of the verification.&#xA;&#xA;At worse, it might leak what other utxo that the initiator controls, if&#xA;they accidentally commit to the wrong utxo and the peer decided to try&#xA;grinding utxo outpoints on the offchance that one matched.&#xA;&#xA;&#xA;&#xA;On Tue, Feb 11, 2020 at 10:04 PM ZmnSCPxj &lt;ZmnSCPxj at protonmail.com&gt; wrote:&#xA;&#xA;&gt; Good morning niftynei, and waxwing, and list,&#xA;&gt;&#xA;&gt; &gt; &gt; s = k + H(kG || kJ || P || P2 || utxo || receiving-node) x&#xA;&gt; &gt;&#xA;&gt; &gt; &gt; and as before transfer opening: (P, P2, u, s, e) with receiving-node&#xA;&gt; implicitly reconstructed to do the verification of the Schnorr sig. It&#39;s&#xA;&gt; basically a message in a signature.&#xA;&gt; &gt;&#xA;&gt; &gt; Oh that&#39;s *much* nicer than calculating a second commitment.&#xA;&gt; Verification by any node that&#39;s not the intended recipient will fail, as&#xA;&gt; they&#39;ll use the wrong node_id (their own).&#xA;&gt; &gt;&#xA;&gt; &gt; It seems unnecessary to me to commit to the utxo, since the pubkey pair&#xA;&gt; effectively does that. What&#39;s the motivation for including it?&#xA;&gt;&#xA;&gt; Probably so that address reuse is not dinged, i.e. I have two UTXOs with&#xA;&gt; the same address and want to make two different channels with different&#xA;&gt; peers.&#xA;&gt;&#xA;&gt; While address reuse Is Bad, you might not have much control over some wog&#xA;&gt; who is supposed to pay you and decides to give you your money in two&#xA;&gt; separate UTXOs to the same address.&#xA;&gt;&#xA;&gt; Regards,&#xA;&gt; ZmnSCPxj&#xA;&gt;&#xA;-------------- next part --------------&#xA;An HTML attachment was scrubbed...&#xA;URL: &lt;http://lists.linuxfoundation.org/pipermail/lightning-dev/attachments/20200212/1c55131e/attachment.html&gt;</html></oembed>