Migration of my blog to Ghost (previously I used strapi, and it was increasingly proving unusable for boring reasons I won't get into here) is currently ongoing. I will add more of the earlier articles as I get a chance. The URLs should not change. Thanks for bearing with me.
To what extent might it be possible to have actions on the Bitcoin blockchain be enforced by verification of statements that involve generators other than the standard generator \(G\)? In general the answer seems like it should be "not at all", but it isn't trivial. I
Proof of being a satoshi millionaire. This file proves that I, as of block 861756, own 4 taproot utxos (that is, specifically unspent bitcoin) whose total value is between 1,000,000 and 1,262,144 sats. (Weirdly specific numbers? The proving system works for \(k\) to \(k + 2^n\
In the modern nation state, courts ("justice") operate with the threat of violence. The exact way a dispute is settled varies (jury, single judge, etc.), but the "finality" of the resolution they provide is based on the fact that the state asserts the final say, and
Outline: * Basic goal of 1-of-\(N\) ring signatures * Recap: the \(\Sigma\)-protocol * OR of \(\Sigma\)-protocols, CDS 1994 * Abe-Ohkubo-Suzuki (AOS) 2002 (broken version) * Security weaknesses * Key prefixing * Borromean, Maxwell-Poelstra 2015 * Linkability and exculpability * AND of \(\Sigma\)-protocols, DLEQ * Liu-Wei-Wong 2004 * Security arguments for the LWW LSAG * Back 2015; compression, single-use