Non-equivocation bond. By forcing users to use a specific nonce.

🤔

Reply to this note

Please Login to reply.

Discussion

This something op CAT enable. Allegedly. Idk what these bonds are but suppose it's time to learn.

Can you give an example of where you'd want to do this and for which it wouldnt create a risk?

If you re-use a nonce for two different signatures with the same key, it leaks the key.

Imagine a UTXO is encumbered with a script that says “you have to use 7” as the nonce.

If you can spend that UTXO and you sign more than one transaction spending it, you leak your private key.

Lots of interesting applications (especially in multi party settings) where you can make it costly for someone to sign two conflicting transactions

Ooooo. So it's a cryptographic way to enforce spending into a narrow scope. Does that help with zero conf or similar?