https://medium.com/@pieter.wuille/the-patent-on-schnorr-signatures-actually-expired-in-2008-before-bitcoins-creation-20b87c472ede

schnorr signatures solve the malleability problem

so how did segwit help lightning?

https://www.reddit.com/r/Bitcoin/comments/u9gya5/why_lightning_network_is_only_compatible_with/

by eliminating malleability

if bitcoin had schnorr signatures this would have been solved for lightning, and we'd still have 1Mb blocks, instead fo kinda 4mb blocks, but really still 1mb we promise

anyone who thinks they know about bitcoin who doesn't understand this most fundamental issue about the signature algorithm and segwit and lightning should be ashamed of themselves

Reply to this note

Please Login to reply.

Discussion

I am confused as to whether I should be ashamed of myself. I don't understand this fundemental issue, but I also don't claim to understand Bitcoin. At least not at a cryptographic primitive level.

essentially it boills down to the problem that flipping a few bits of the transaction let you pass off a fake transaction as the one that matches a signature, and this is why it is a bad thing for lightning, as this essentially can mean the difference between a truthful record of the channel state changes and me robbing you

with schnorr signatures on the transactions you can't twiddle those bits on the edge, segwit is a countermeasure that only applies to ECDSA signature algorithm

conclusion?

i remember back then, i had a peripheral interest but deciding that segwit was shit, segwit2x was utter shit, and the best was schnorr but somehow that isn't how it panned out

bear this in mind:

i was released from prison after being caught dealing psychedelic drugs on the dark web in late 2014, i spent the next 2 years homeless, started to scrape myself up after discovering the steemit blockchain, i was teaching myself how to do devops with that codebase and docker, and this was when i just started learning Go (though i heard of it in late 2013) and about the time this was all happening i was busy trying to make money mining crypto with GPUs so i could focus myself on learning to build these things

K, t-y 4 the filler. i still want a betr way to comm. with U - more secure - but fixing sum tech here 1st/*

i wanted imput clear & concise like U render/*

t-y m/* i have sum other stuff but need to fix my zapout first/* i appreciate the answers & the way U comm./*

i should point out that, at this point, i don't think any LN implementation leverages taproot, as it only just got to a point where you can usually get TR transactions into a block in the last year, maybe it started to become possible last year, 2023

LN needed no malleability, and that was the compromise that we ended up with, that's all there is to it... and for whatever reason, this isn't the centre of why we now have fairly majority support for taproot, even though schnorr signatures have been on the radar since 2016