Replying to Avatar x92vbb

pubkeys are derived from privkeys by ECC, which can be vulnerable to Shor's algorithm by simply calculating your privkey out of your pubkey. As long as your pubkey is not revealed, there can be no long range attack. P2WSH/P2WPKH only reveal a UTXO address specific pubkey when you spend them (so you have about 10 min for a short range attack).
Avatar
🇵🇸 whoever loves Digit 9mo ago

Thanks for the explanation 🤙

I might have to update my list of essential shit nostr needs nostr:nevent1qvzqqqqqqypzqamkcvk5k8g730e2j6atadp6mxk7z4aaxc7cnwrlkclx79z4tzygqy88wumn8ghj7mn0wvhxcmmv9uq3jamnwvaz7tmswfjk66t4d5h8qunfd4skctnwv46z7qpq5ytyweq7k7589yvvpwv8hnesftdaqe4xl50nmmadjfgldewyjq8qufrfcd

Reply to this note

Please Login to reply.

Discussion

Avatar
x92vbb 9mo ago

Great list! 👍🧡

Maybe also consider adding an audit to Tor attack vectors like timing analysis / Sybil attacks, especially if #Nostr is used for direct communication.

https://cointelegraph.com/news/tor-germany-timing-attack-privacy

Avatar
🇵🇸 whoever loves Digit 9mo ago

Maybe in general "we need more security audits" should be a point in the list

Or is there something more specific I'm missing for a Tor section of the list?

Avatar
x92vbb 9mo ago

Tor is imho the backbone of our privacy. We need to donate more for ita development and node maintenance and/or run a node ourselves if we have the technical skills and expertise to do so.