2015-10-20.log

--- Log opened Tue Oct 20 00:00:01 2015
-!- xabbix [~xabbix@unaffiliated/xabbix] has joined #bitcoin-wizards00:00
-!- matsjj [~matsjj@p20030089EA11443EB1F546340EB51669.dip0.t-ipconnect.de] has quit [Ping timeout: 240 seconds]00:00
-!- melvster [~melvster@ip-86-49-18-198.net.upcbroadband.cz] has joined #bitcoin-wizards00:02
-!- orik [~orik@c-24-18-226-84.hsd1.wa.comcast.net] has joined #bitcoin-wizards00:02
-!- matsjj [~matsjj@p20030089EA11443EB1F546340EB51669.dip0.t-ipconnect.de] has joined #bitcoin-wizards00:12
-!- mjerr [~mjerr@p5B209E67.dip0.t-ipconnect.de] has joined #bitcoin-wizards00:13
-!- nivah [~linker@115.79.55.177] has joined #bitcoin-wizards00:18
-!- chris13243 [~chris@107.25.224.111] has joined #bitcoin-wizards00:19
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has quit [Ping timeout: 244 seconds]00:19
-!- rusty [~rusty@pdpc/supporter/bronze/rusty] has quit [Ping timeout: 250 seconds]00:21
-!- bramc [~bram@99-75-88-206.lightspeed.sntcca.sbcglobal.net] has quit [Quit: This computer has gone to sleep]00:26
-!- DougieBot5000_ [~DougieBot@unaffiliated/dougiebot5000] has quit [Quit: Leaving]00:27
-!- chris13243 [~chris@107.25.224.111] has quit [Ping timeout: 250 seconds]00:35
-!- crowleyman [~crowleyma@213.231.47.17.pool.breezein.net] has joined #bitcoin-wizards00:38
-!- xabbix [~xabbix@unaffiliated/xabbix] has quit [Ping timeout: 240 seconds]00:40
-!- ebfull [~sean@73.34.119.0] has joined #bitcoin-wizards00:40
-!- yang [yang@freenode/sponsor/fsf.member.yang] has quit [Ping timeout: 272 seconds]00:55
-!- chris13243 [~chris@108.121.57.135] has joined #bitcoin-wizards00:57
-!- bendavenport [~bpd@c-50-131-42-132.hsd1.ca.comcast.net] has quit [Quit: bendavenport]00:57
-!- chris13243 [~chris@108.121.57.135] has quit [Ping timeout: 244 seconds]01:03
-!- CoinMuncher [~jannes@178.132.211.90] has joined #bitcoin-wizards01:04
-!- orik [~orik@c-24-18-226-84.hsd1.wa.comcast.net] has quit [Quit: My Mac has gone to sleep. ZZZzzz…]01:20
-!- bit2017 [~linker@210.245.34.191] has joined #bitcoin-wizards01:29
-!- hazirafel [~hazirafel@176.106.227.34] has joined #bitcoin-wizards01:32
-!- nivah [~linker@115.79.55.177] has quit [Ping timeout: 255 seconds]01:33
-!- damethos [~damethos@unaffiliated/damethos] has joined #bitcoin-wizards01:46
-!- c0rw|zZz is now known as c0rw1n01:52
-!- dEBRUYNE__ [~dEBRUYNE@56-197-ftth.onsbrabantnet.nl] has joined #bitcoin-wizards01:53
-!- forrestv [forrestv@unaffiliated/forrestv] has quit [Quit: ZNC - http://znc.sourceforge.net]01:59
-!- rubensayshi [~ruben@91.206.81.13] has joined #bitcoin-wizards02:06
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has joined #bitcoin-wizards02:10
-!- Londe2 [~Londe@cpe-104-32-148-17.socal.res.rr.com] has quit [Quit: Londe2]02:10
-!- moa [~kiwigb@opentransactions/dev/moa] has joined #bitcoin-wizards02:18
-!- bedeho [~bedeho@50-202-37-133-static.hfc.comcastbusiness.net] has quit [Ping timeout: 240 seconds]02:21
-!- nsh [~lol@wikipedia/nsh] has quit [Excess Flood]02:21
-!- hazirafel [~hazirafel@176.106.227.34] has quit [Remote host closed the connection]02:22
-!- nsh [~lol@wikipedia/nsh] has joined #bitcoin-wizards02:29
-!- dEBRUYNE__ is now known as dEBRUYNE02:35
-!- nsh [~lol@wikipedia/nsh] has quit [Excess Flood]02:39
-!- nsh [~lol@wikipedia/nsh] has joined #bitcoin-wizards02:43
-!- AaronvanW [~ewout@unaffiliated/aaronvanw] has joined #bitcoin-wizards02:48
-!- jtimon [~quassel@212.Red-88-5-10.dynamicIP.rima-tde.net] has joined #bitcoin-wizards02:56
-!- p15 [~p15@77.91.145.64.client.static.strong-tk2.bringover.net] has quit [Ping timeout: 240 seconds]03:00
-!- nsh [~lol@wikipedia/nsh] has quit [Excess Flood]03:02
-!- nsh [~lol@wikipedia/nsh] has joined #bitcoin-wizards03:07
-!- Jaamg [jhpiloma@gateway/shell/tkk.fi/x-ldpjxdedsusbnhfm] has joined #bitcoin-wizards03:12
-!- erasmospunk [~erasmospu@179.43.177.162] has joined #bitcoin-wizards03:16
-!- nsh [~lol@wikipedia/nsh] has quit [Excess Flood]03:28
-!- nsh [~lol@wikipedia/nsh] has joined #bitcoin-wizards03:32
-!- Myagui [Myagui@shell.xshellz.com] has quit [Ping timeout: 250 seconds]03:33
-!- Myagui [Myagui@shell.xshellz.com] has joined #bitcoin-wizards03:40
-!- moa [~kiwigb@opentransactions/dev/moa] has quit [Quit: Leaving.]03:46
-!- hazirafel [~hazirafel@bzq-79-182-178-75.red.bezeqint.net] has joined #bitcoin-wizards03:47
-!- chris13243 [~chris@174-144-5-103.pools.spcsdns.net] has joined #bitcoin-wizards03:49
-!- gielbier [~giel____@a149043.upc-a.chello.nl] has quit [Changing host]04:06
-!- gielbier [~giel____@unaffiliated/gielbier] has joined #bitcoin-wizards04:06
-!- yang [yang@freenode/sponsor/fsf.member.yang] has joined #bitcoin-wizards04:22
-!- chris13243 [~chris@174-144-5-103.pools.spcsdns.net] has quit [Ping timeout: 264 seconds]04:24
-!- crescendo [~mozart@unaffiliated/crescendo] has quit [Remote host closed the connection]04:30
-!- nsh [~lol@wikipedia/nsh] has quit [Excess Flood]04:52
-!- moa [~kiwigb@opentransactions/dev/moa] has joined #bitcoin-wizards04:58
-!- nsh [~lol@wikipedia/nsh] has joined #bitcoin-wizards04:59
-!- AaronvanW [~ewout@unaffiliated/aaronvanw] has quit [Ping timeout: 246 seconds]05:00
-!- sneak [~sneak@unaffiliated/sneak] has quit [Ping timeout: 268 seconds]05:03
-!- sneak [~sneak@unaffiliated/sneak] has joined #bitcoin-wizards05:04
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has joined #bitcoin-wizards05:04
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has quit [Remote host closed the connection]05:10
-!- AaronvanW [~ewout@unaffiliated/aaronvanw] has joined #bitcoin-wizards05:13
-!- eudoxia [~eudoxia@r167-57-108-150.dialup.adsl.anteldata.net.uy] has joined #bitcoin-wizards05:16
-!- jaromil [~jaromil@f1x.eu] has quit [Remote host closed the connection]05:18
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has quit [Ping timeout: 264 seconds]05:21
-!- K1773R [~K1773R@unaffiliated/k1773r] has joined #bitcoin-wizards05:22
-!- rustyn [~rustyn@unaffiliated/rustyn] has quit [Read error: Connection reset by peer]05:24
-!- rustyn [~rustyn@unaffiliated/rustyn] has joined #bitcoin-wizards05:25
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has joined #bitcoin-wizards05:29
-!- dEBRUYNE [~dEBRUYNE@56-197-ftth.onsbrabantnet.nl] has quit [Quit: Leaving]05:32
-!- airbreather [~airbreath@d149-67-99-43.nap.wideopenwest.com] has joined #bitcoin-wizards05:33
-!- erasmospunk [~erasmospu@179.43.177.162] has quit [Remote host closed the connection]05:38
-!- bit2017 [~linker@210.245.34.191] has quit [Ping timeout: 240 seconds]05:39
-!- crowleyman [~crowleyma@213.231.47.17.pool.breezein.net] has quit [Quit: Textual IRC Client: www.textualapp.com]05:41
-!- bramc [~bram@99-75-88-206.lightspeed.sntcca.sbcglobal.net] has joined #bitcoin-wizards05:54
-!- erasmospunk [~erasmospu@gateway/vpn/privateinternetaccess/erasmospunk] has joined #bitcoin-wizards06:12
-!- sparetire_ [~sparetire@unaffiliated/sparetire] has joined #bitcoin-wizards06:20
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has joined #bitcoin-wizards06:21
OxADADAmornin06:28
-!- nivah [~linker@171.232.51.106] has joined #bitcoin-wizards06:29
-!- hazirafel [~hazirafel@bzq-79-182-178-75.red.bezeqint.net] has quit [Ping timeout: 240 seconds]06:34
-!- moa [~kiwigb@opentransactions/dev/moa] has left #bitcoin-wizards []06:35
-!- afk11 [~afk11@unaffiliated/afk11] has joined #bitcoin-wizards06:35
-!- Giszmo [~leo@pc-36-133-241-201.cm.vtr.net] has joined #bitcoin-wizards06:41
-!- helo_ is now known as helo06:45
-!- bramc [~bram@99-75-88-206.lightspeed.sntcca.sbcglobal.net] has quit [Quit: This computer has gone to sleep]06:52
-!- aburan28 [~xypher@static-108-45-93-78.washdc.fios.verizon.net] has joined #bitcoin-wizards07:00
-!- c0rw1n is now known as c0rw|away07:01
KirejiOxADADA: g'mornin07:04
-!- hazirafel [~hazirafel@bzq-79-182-178-75.red.bezeqint.net] has joined #bitcoin-wizards07:06
-!- dEBRUYNE [~dEBRUYNE@56-197-ftth.onsbrabantnet.nl] has joined #bitcoin-wizards07:07
-!- Guyver2 [~Guyver2@guyver2.xs4all.nl] has joined #bitcoin-wizards07:09
-!- Kireji [~nospam@unaffiliated/kireji] has quit [Quit: leaving]07:15
-!- dEBRUYNE [~dEBRUYNE@56-197-ftth.onsbrabantnet.nl] has quit [Quit: Leaving]07:15
-!- erasmospunk [~erasmospu@gateway/vpn/privateinternetaccess/erasmospunk] has quit [Remote host closed the connection]07:16
-!- hazirafel [~hazirafel@bzq-79-182-178-75.red.bezeqint.net] has quit [Ping timeout: 240 seconds]07:17
-!- erasmospunk [~erasmospu@179.43.177.130] has joined #bitcoin-wizards07:18
-!- Dizzle [~Dizzle@104-6-36-162.lightspeed.austtx.sbcglobal.net] has joined #bitcoin-wizards07:18
-!- Pugg [Elite11832@gateway/shell/elitebnc/x-jjhfmieobgkcwtca] has joined #bitcoin-wizards07:21
-!- Kireji [~nospam@unaffiliated/kireji] has joined #bitcoin-wizards07:23
-!- c0rw|awa_ [~c0rw1n@162.84-67-87.adsl-dyn.isp.belgacom.be] has joined #bitcoin-wizards07:24
-!- DougieBot5000 [~DougieBot@unaffiliated/dougiebot5000] has joined #bitcoin-wizards07:25
-!- c0rw|away [~c0rw1n@162.84-67-87.adsl-dyn.isp.belgacom.be] has quit [Ping timeout: 252 seconds]07:26
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has quit [Ping timeout: 250 seconds]07:29
-!- hazirafel [~hazirafel@bzq-79-182-178-75.red.bezeqint.net] has joined #bitcoin-wizards07:39
-!- MrHodl [~fuc@95.211.224.48] has joined #bitcoin-wizards07:46
-!- rubensayshi [~ruben@91.206.81.13] has quit [Remote host closed the connection]07:51
-!- shen_noe [~shen_noe@wired018.math.utah.edu] has joined #bitcoin-wizards07:54
-!- ASTP001 [~ASTP001@50.232.225.10] has quit [Quit: bye bye~]07:56
-!- ASTP001 [~ASTP001@50.232.225.10] has joined #bitcoin-wizards07:56
-!- bsm1175321 [~bsm117532@38.121.165.30] has joined #bitcoin-wizards08:02
-!- dEBRUYNE [~dEBRUYNE@56-197-ftth.onsbrabantnet.nl] has joined #bitcoin-wizards08:04
-!- nwilcox [~nwilcox@74-95-207-205-SFBA.hfc.comcastbusiness.net] has joined #bitcoin-wizards08:07
-!- afk11 [~afk11@unaffiliated/afk11] has quit [Ping timeout: 260 seconds]08:11
-!- TD-Linux [~Thomas@about/essy/indecisive/TD-Linux] has quit [Ping timeout: 265 seconds]08:12
-!- TD-Linux [~Thomas@about/essy/indecisive/TD-Linux] has joined #bitcoin-wizards08:15
-!- ASTP001 [~ASTP001@50.232.225.10] has quit [Quit: bye bye~]08:20
-!- ASTP001 [~ASTP001@50.232.225.10] has joined #bitcoin-wizards08:21
-!- mjerr [~mjerr@p5B209E67.dip0.t-ipconnect.de] has quit [Ping timeout: 268 seconds]08:24
-!- afk11 [~afk11@unaffiliated/afk11] has joined #bitcoin-wizards08:27
-!- zooko [~user@75-170-22-58.eugn.qwest.net] has joined #bitcoin-wizards08:31
-!- paveljanik [~paveljani@unaffiliated/paveljanik] has joined #bitcoin-wizards08:38
-!- damethos [~damethos@unaffiliated/damethos] has quit [Quit: Bye]08:40
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has joined #bitcoin-wizards08:43
-!- mjerr [~mjerr@p5B209E67.dip0.t-ipconnect.de] has joined #bitcoin-wizards08:51
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has quit [Quit: Quitte]08:53
-!- Jeremy_Rand__ [~jeremy@172.56.14.31] has joined #bitcoin-wizards08:54
-!- paci [~paci@host41-233-static.58-79-b.business.telecomitalia.it] has joined #bitcoin-wizards08:56
-!- Jeremy_Rand__ is now known as Jeremy_Rand09:03
-!- Jeremy_Rand [~jeremy@172.56.14.31] has quit [Quit: Konversation terminated!]09:03
-!- Jeremy_Rand [~jeremy@172.56.14.31] has joined #bitcoin-wizards09:03
-!- moa [~kiwigb@opentransactions/dev/moa] has joined #bitcoin-wizards09:10
-!- zooko [~user@75-170-22-58.eugn.qwest.net] has quit [Remote host closed the connection]09:17
-!- bendavenport [~bpd@96.90.231.161] has joined #bitcoin-wizards09:18
-!- zooko [~user@75-170-22-58.eugn.qwest.net] has joined #bitcoin-wizards09:19
-!- weex [~weex@fsf/member/weex] has quit [Remote host closed the connection]09:21
-!- mdavid613 [~Adium@cpe-104-172-191-85.socal.res.rr.com] has joined #bitcoin-wizards09:24
-!- mdavid613 is now known as mdavid09:24
-!- mdavid is now known as mdavid61309:25
-!- nwilcox [~nwilcox@74-95-207-205-SFBA.hfc.comcastbusiness.net] has quit [Ping timeout: 268 seconds]09:37
-!- MrHodl [~fuc@95.211.224.48] has quit [Ping timeout: 255 seconds]09:37
-!- bramc [~bram@99-75-88-206.lightspeed.sntcca.sbcglobal.net] has joined #bitcoin-wizards09:41
-!- mkarrer_ [~mkarrer@165.Red-83-55-152.dynamicIP.rima-tde.net] has joined #bitcoin-wizards09:46
-!- Jeremy_Rand [~jeremy@172.56.14.31] has quit [Ping timeout: 240 seconds]09:49
-!- Jeremy_Rand [~jeremy@172.56.14.31] has joined #bitcoin-wizards09:49
-!- CoinMuncher [~jannes@178.132.211.90] has quit [Quit: Leaving.]09:50
-!- Jeremy_Rand_ [~jeremy@172.56.15.244] has joined #bitcoin-wizards09:57
-!- Jeremy_Rand [~jeremy@172.56.14.31] has quit [Ping timeout: 268 seconds]09:58
-!- matsjj [~matsjj@p20030089EA11443EB1F546340EB51669.dip0.t-ipconnect.de] has quit [Remote host closed the connection]10:03
-!- mjerr [~mjerr@p5B209E67.dip0.t-ipconnect.de] has quit [Ping timeout: 255 seconds]10:06
-!- eudoxia_ [~eudoxia@r167-56-32-71.dialup.adsl.anteldata.net.uy] has joined #bitcoin-wizards10:06
-!- eudoxia_ [~eudoxia@r167-56-32-71.dialup.adsl.anteldata.net.uy] has quit [Client Quit]10:07
-!- eudoxia [~eudoxia@r167-57-108-150.dialup.adsl.anteldata.net.uy] has quit [Ping timeout: 250 seconds]10:10
-!- bildramer [~bildramer@p4FE649E1.dip0.t-ipconnect.de] has quit [Ping timeout: 272 seconds]10:11
-!- Jeremy_Rand_ is now known as Jeremy_Rand10:13
-!- Jeremy_Rand [~jeremy@172.56.15.244] has quit [Quit: Konversation terminated!]10:13
-!- Jeremy_Rand [~jeremy@172.56.15.244] has joined #bitcoin-wizards10:14
-!- orik [~orik@c-24-18-226-84.hsd1.wa.comcast.net] has joined #bitcoin-wizards10:21
-!- hazirafel [~hazirafel@bzq-79-182-178-75.red.bezeqint.net] has quit [Remote host closed the connection]10:22
-!- Jeremy_Rand [~jeremy@172.56.15.244] has quit [Ping timeout: 265 seconds]10:25
-!- CodeShark [CodeShark@cpe-76-167-237-202.san.res.rr.com] has joined #bitcoin-wizards10:26
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has joined #bitcoin-wizards10:26
-!- orik [~orik@c-24-18-226-84.hsd1.wa.comcast.net] has quit [Ping timeout: 260 seconds]10:28
-!- StephenM347 [~stephenm3@static-64-223-246-218.port.east.myfairpoint.net] has joined #bitcoin-wizards10:35
-!- dEBRUYNE [~dEBRUYNE@56-197-ftth.onsbrabantnet.nl] has quit [Ping timeout: 255 seconds]10:37
-!- mjerr [~mjerr@p5B209E67.dip0.t-ipconnect.de] has joined #bitcoin-wizards10:38
-!- matsjj [~matsjj@p20030089EA11443EB1F546340EB51669.dip0.t-ipconnect.de] has joined #bitcoin-wizards10:38
-!- matsjj [~matsjj@p20030089EA11443EB1F546340EB51669.dip0.t-ipconnect.de] has quit [Remote host closed the connection]10:41
-!- matsjj [~matsjj@p20030089EA11443EB1F546340EB51669.dip0.t-ipconnect.de] has joined #bitcoin-wizards10:41
-!- zooko [~user@75-170-22-58.eugn.qwest.net] has quit [Remote host closed the connection]10:43
-!- xaptah [kaptah@hilla.kapsi.fi] has quit [Ping timeout: 240 seconds]10:44
-!- bedeho [~bedeho@50-202-37-133-static.hfc.comcastbusiness.net] has joined #bitcoin-wizards10:46
-!- bildramer [~bildramer@p4FE649E1.dip0.t-ipconnect.de] has joined #bitcoin-wizards10:49
-!- dEBRUYNE [~dEBRUYNE@56-197-ftth.onsbrabantnet.nl] has joined #bitcoin-wizards10:50
-!- kaptah [kaptah@hilla.kapsi.fi] has joined #bitcoin-wizards10:52
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has quit [Quit: Quitte]10:53
-!- kyuupichan [~Neil@ae053102.dynamic.ppp.asahi-net.or.jp] has quit [Ping timeout: 240 seconds]11:07
-!- Jeremy_Rand_ [~jeremy@172.56.14.120] has joined #bitcoin-wizards11:15
-!- nwilcox [~nwilcox@173.239.75.179] has joined #bitcoin-wizards11:22
-!- bramc [~bram@99-75-88-206.lightspeed.sntcca.sbcglobal.net] has quit [Quit: This computer has gone to sleep]11:24
-!- Jeremy_Rand_ is now known as Jeremy_Rand11:30
-!- Jeremy_Rand [~jeremy@172.56.14.120] has quit [Quit: Konversation terminated!]11:31
-!- Jeremy_Rand [~jeremy@172.56.14.120] has joined #bitcoin-wizards11:31
-!- chris13243 [~chris@72-62-156-216.pools.spcsdns.net] has joined #bitcoin-wizards11:32
-!- OxADADA [~OxADADA@alumni-linux.ccs.neu.edu] has left #bitcoin-wizards []11:45
-!- mjerr [~mjerr@p5B209E67.dip0.t-ipconnect.de] has quit [Ping timeout: 240 seconds]11:45
-!- matsjj [~matsjj@p20030089EA11443EB1F546340EB51669.dip0.t-ipconnect.de] has quit [Remote host closed the connection]11:48
-!- orik [~orik@c-24-18-226-84.hsd1.wa.comcast.net] has joined #bitcoin-wizards11:48
-!- Jeremy_Rand_ [~jeremy@172.56.15.183] has joined #bitcoin-wizards11:48
-!- Yoghur114 [~jorn@g227014.upc-g.chello.nl] has joined #bitcoin-wizards11:49
-!- Jeremy_Rand [~jeremy@172.56.14.120] has quit [Ping timeout: 265 seconds]11:51
-!- mkarrer_ [~mkarrer@165.Red-83-55-152.dynamicIP.rima-tde.net] has quit [Remote host closed the connection]11:51
-!- ens [~ens@haileris.dyndns.org] has joined #bitcoin-wizards11:54
-!- chris13243 [~chris@72-62-156-216.pools.spcsdns.net] has quit [Ping timeout: 240 seconds]11:56
-!- belcher [~user@unaffiliated/belcher] has joined #bitcoin-wizards12:01
-!- aburan28 [~xypher@static-108-45-93-78.washdc.fios.verizon.net] has quit [Ping timeout: 240 seconds]12:01
-!- Jeremy_Rand_ [~jeremy@172.56.15.183] has quit [Ping timeout: 240 seconds]12:04
-!- Jeremy_Rand_ [~jeremy@172.56.15.183] has joined #bitcoin-wizards12:05
-!- orik [~orik@c-24-18-226-84.hsd1.wa.comcast.net] has quit [Quit: Textual IRC Client: www.textualapp.com]12:06
-!- licnep [uid4387@gateway/web/irccloud.com/x-wwmzveanproygckg] has joined #bitcoin-wizards12:09
-!- chris13243 [~chris@68-26-103-60.pools.spcsdns.net] has joined #bitcoin-wizards12:14
-!- bedeho [~bedeho@50-202-37-133-static.hfc.comcastbusiness.net] has quit [Ping timeout: 246 seconds]12:16
-!- melvster [~melvster@ip-86-49-18-198.net.upcbroadband.cz] has quit [Ping timeout: 264 seconds]12:27
-!- bedeho [~bedeho@50-202-37-133-static.hfc.comcastbusiness.net] has joined #bitcoin-wizards12:32
-!- jmcn [~jamie@76.57.114.87.dyn.plus.net] has quit [Ping timeout: 256 seconds]12:37
-!- jmcn [~jamie@76.57.114.87.dyn.plus.net] has joined #bitcoin-wizards12:37
-!- kgk_ [~kgk@173-167-115-138-sfba.hfc.comcastbusiness.net] has joined #bitcoin-wizards12:39
-!- melvster [~melvster@ip-86-49-18-198.net.upcbroadband.cz] has joined #bitcoin-wizards12:40
-!- Burrito [~Burrito@unaffiliated/burrito] has joined #bitcoin-wizards12:40
-!- rustyn [~rustyn@unaffiliated/rustyn] has quit [Read error: Connection reset by peer]12:40
-!- rustyn [~rustyn@unaffiliated/rustyn] has joined #bitcoin-wizards12:41
-!- Jeremy_Rand_ [~jeremy@172.56.15.183] has quit [Read error: Connection reset by peer]12:41
-!- rusty [~rusty@pdpc/supporter/bronze/rusty] has joined #bitcoin-wizards12:42
-!- Jeremy_Rand_ [~jeremy@172.56.15.183] has joined #bitcoin-wizards12:42
-!- bedeho [~bedeho@50-202-37-133-static.hfc.comcastbusiness.net] has quit [Remote host closed the connection]12:42
-!- afk11 [~afk11@unaffiliated/afk11] has quit [Ping timeout: 265 seconds]12:45
-!- bedeho [~bedeho@50-202-37-133-static.hfc.comcastbusiness.net] has joined #bitcoin-wizards12:46
-!- chris13243 [~chris@68-26-103-60.pools.spcsdns.net] has quit [Ping timeout: 272 seconds]12:46
-!- matsjj [~matsjj@p5B209E67.dip0.t-ipconnect.de] has joined #bitcoin-wizards12:48
-!- matsjj [~matsjj@p5B209E67.dip0.t-ipconnect.de] has quit [Ping timeout: 250 seconds]12:53
katuhttps://gist.github.com/katlogic/8337fa32bc43bca4a26d12:58
katucan somebody comment if this makes sense?12:58
katu(abusing montgomery curves for fast ECS)12:59
kanzure.title https://gist.github.com/katlogic/8337fa32bc43bca4a26d13:00
yoleauxecfast.md · GitHub13:00
-!- afk11 [~afk11@unaffiliated/afk11] has joined #bitcoin-wizards13:03
-!- nwilcox [~nwilcox@173.239.75.179] has quit [Ping timeout: 260 seconds]13:05
kanzure.title https://briansmith.org/GFp-013:07
yoleauxkanzure: Sorry, that doesn't appear to be an HTML page.13:07
kanzure"Ideas for a new elliptic curve library"13:07
-!- CodeShark [CodeShark@cpe-76-167-237-202.san.res.rr.com] has quit [Ping timeout: 264 seconds]13:10
-!- phantomcircuit [~phantomci@strateman.ninja] has joined #bitcoin-wizards13:11
katusounds like a good idea overall. abuse operator overloading in lua or python for DSL scripts of curve definitions, make it emit appropiate C code13:12
-!- poppingtonic [~Thunderbi@unaffiliated/poppingtonic] has joined #bitcoin-wizards13:14
gmaxwellkatu: your signatures do not pass verification.13:14
katugmaxwell: they dont? :(13:15
katunote that it has to be unmasked (while posshibly keeping the cofactor 8 constraints, ie keep lower 3 bits cleared, though not sure that is mandatory for this use)13:16
katuotherwise there is no commutativity necessary for the commitment to work.13:17
-!- paveljanik [~paveljani@unaffiliated/paveljanik] has quit [Quit: Leaving]13:19
gmaxwellI think you're mistaking the operation of curve25519(), it is not addition.13:21
katulet me write a PoC :)13:22
-!- Dizzle [~Dizzle@104-6-36-162.lightspeed.austtx.sbcglobal.net] has quit [Quit: bbiab]13:24
gmaxwellWhat you're describing is this relation; (h()*(x-h()))G == xG  which is clearly untrue.13:27
-!- ASTP001 [~ASTP001@50.232.225.10] has quit [Quit: ZZZzzz…]13:28
-!- StephenM347 [~stephenm3@static-64-223-246-218.port.east.myfairpoint.net] has quit []13:31
-!- rusty [~rusty@pdpc/supporter/bronze/rusty] has quit [Ping timeout: 240 seconds]13:39
-!- Jeremy_Rand_ [~jeremy@172.56.15.183] has quit [Read error: Connection reset by peer]13:39
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has joined #bitcoin-wizards13:40
-!- ASTP001 [~ASTP001@50.232.225.10] has joined #bitcoin-wizards13:42
-!- Jeremy_Rand_ [~jeremy@172.56.15.183] has joined #bitcoin-wizards13:42
-!- belcher [~user@unaffiliated/belcher] has quit [Quit: Leaving]13:47
-!- Guyver2 [~Guyver2@guyver2.xs4all.nl] has quit [Quit: :)]13:49
katugmaxwell: you're right, turns out they're only semi-commutative :(13:57
katuie curve25519(30, curve25519(10, curve25519(20, G))) == curve25519(30, curve25519(20, curve25519(10, G))) holds13:57
katubut curve25519(10, curve25519(20, G)) == curve25519(10, curve25519(10, curve25519(10, G))) does not13:57
katuoh well, now its obvious why its used only for dh13:57
gmaxwellkatu: you can sign just fine with that function, though you need an additional add.13:58
katuyep13:58
katularger signature13:58
gmaxwellkatu: you're making a mistake of thinking the curve is "additive only" -- there is no such thing. (or rather, depending on how you define it, every curve is 'additive only')13:58
katugmaxwell: by that i mean i cant supply multiplier modulo group order to "substract"13:59
gmaxwellyou most certantly can.13:59
katuoh14:00
* katu had all the assumption about x-only 25519 wrong :)14:00
gmaxwelldoesn't help that a lot of people (including DJB) explain things in a confusing manner.14:00
-!- OxADADA [~OxADADA@alumni-linux.ccs.neu.edu] has joined #bitcoin-wizards14:02
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has quit [Ping timeout: 264 seconds]14:02
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has joined #bitcoin-wizards14:03
-!- bedeho [~bedeho@50-202-37-133-static.hfc.comcastbusiness.net] has quit [Ping timeout: 265 seconds]14:03
phantomcircuitgmaxwell, a merkle sum tree could be implemented as a soft forking change today right?14:05
katugmaxwell: curve25519(50, curve25519(50, G)) == curve25519((-100)%ORDER, curve25519(200, G)14:05
katudoes not hold :(14:05
katuwith order 723700557733226221397318656304299424085711635937990760600195093828545425098914:05
-!- CodeShark [~CodeShark@cpe-76-167-237-202.san.res.rr.com] has joined #bitcoin-wizards14:06
andytoshikatu: the LHS of what you wrote should be 2500G, no?14:06
phantomcircuitmaaku, the best generic commitments scheme we've come up with is still putting a commitment in the last transaction right?14:07
andytoshibut the RHS is -20000G (assuming i add a close-paren at the end of your message14:07
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has joined #bitcoin-wizards14:07
gmaxwellcurve25519() is a multiplication,  to invert that you need the modular inverse.14:07
maakuphantomcircuit: soft-fork yes14:07
maakubut it's a non-invasive hard fork to do better -- make the right-branch from the root of the merkle tree the commitment14:08
phantomcircuitmaaku, right that's what i meant14:08
katuandytoshi: https://gist.githubusercontent.com/katlogic/8ae910026d041fda927a/raw/f9f765937803e7d5c6af68db8c5b00cb0febb523/25519.py14:08
katuis what i'm using14:08
-!- bsm1175321 [~bsm117532@38.121.165.30] has quit [Ping timeout: 240 seconds]14:08
maakuphantomcircuit: i would be severely disappointed and lose faith in this process if something as uncontroversial as that didn't make it into whatever block size hard fork comes out of this14:09
katuit does modular inverse after each call to curve25519()14:09
phantomcircuitmaaku, my interest is in whether the merkle sum trees could be soft forked in with a reasonable commitment scheme14:09
gmaxwellkatu: you are computing 100*G on the lefthand side, and your right hand should be either 100G or 200*(1/2)G  (or 3618502788666131106986593281521497120428558179689953803000975469142727125495G  assuming the order you gave above is correct).14:09
-!- poppingtonic1 [~Thunderbi@unaffiliated/poppingtonic] has joined #bitcoin-wizards14:10
-!- Jeremy_Rand_ [~jeremy@172.56.15.183] has quit [Ping timeout: 265 seconds]14:10
gmaxwelle.g. in sage14:10
gmaxwellsage: (FiniteField(7237005577332262213973186563042994240857116359379907606001950938285454250989)(200))*361850278866613110698659328152149712042855817968995380300097546914272712549514:10
gmaxwell10014:10
maakubest non-fork: last 32 bytes of last output of coinbase. best soft-fork: last 32 bytes of last output of last transaction (soft-fork only needed to guarantee output is available for miner to spend). best hard-fork: right-branch from root of merkle tree (transactions left, commitments right)14:10
-!- poppingtonic [~Thunderbi@unaffiliated/poppingtonic] has quit [Ping timeout: 244 seconds]14:11
-!- poppingtonic1 is now known as poppingtonic14:11
phantomcircuitmaaku, actually im not sure that what i was thinking is even useful14:12
phantomcircuiti was thinking that you might be able to get the incentives right for utxo commitments with a sum tree, but actually im not sure you could14:13
phantomcircuitinstead of inserting fake entires into the commitment an attacker can simply replace all the scriptPubKey's14:14
-!- bedeho [~bedeho@50-202-37-133-static.hfc.comcastbusiness.net] has joined #bitcoin-wizards14:15
katujust for clarity (if theres any with treating 25519 as blackbox), gmaxwell, andytoshi :curve25519(2500, G) == curve25519(50, curve25519(50, G))14:15
katucurse you djb and your confusing explanations14:15
-!- moa [~kiwigb@opentransactions/dev/moa] has quit [Quit: Leaving.]14:16
CodeSharkphantomcircuit: just got here - what are you trying to accomplish?14:16
CodeSharksum trees over outputs?14:18
CodeSharkthat do not require checking signatures?14:19
phantomcircuitCodeShark, sum tree over the utxo set commitment plus sum tree over the blocks would enable proving false inflation14:19
phantomcircuitbut it doesn't help with proving that the utxo commitment has the right pubkey scripts14:20
CodeSharkthat would require checking signatures, no?14:21
CodeSharkat the very least14:21
phantomcircuitreplacing the pubkey scripts?14:21
phantomcircuitno because they can also give a fake txid:index pair14:21
phantomcircuitand now you need to prove that the txid:index doesn't appear in the blockchain14:22
CodeSharkhence "at the very least" - you also need to prove the outputs are spendable14:22
CodeSharkright14:22
CodeSharkcan we do better than O(n) for such a proof, n being the blockchain length?14:23
phantomcircuiti dont think so14:23
phantomcircuitwell maybe we can with a hard fork14:23
* phantomcircuit goes to look something up14:24
andytoshikatu: that's correct. can you link to djb's explanation of this?14:27
phantomcircuitCodeShark, no i dont think you can14:28
katuandytoshi: 'ensure ``contributory'' behavior' ... just ^f contributory in http://cr.yp.to/ecdh.html14:29
phantomcircuitproving that a transaction traces back to a coinbase can be done in less than n but is hardly compact14:29
CodeSharkyou could do a probabilistic proof that fails on occasion, perhaps14:29
phantomcircuitbut i dont see how you can prove that a transaction was never valid14:29
katui'm curious now why ed25519 then (which uses y and conversion to jacobian representation, and is thus a bit more complicated)14:29
katuas it seems montgomery 25519 is ok for signing14:30
phantomcircuitCodeShark, im not sure a probabilistic proof is useful, probabilistic validation which generates absolute proofs are but not probabilistic proofs14:30
phantomcircuit:)14:30
phantomcircuitgmaxwell, am i missing something obvious?14:31
andytoshikatu: i'm confused what coordinates have to do with ECDH at all14:31
phantomcircuit(i ask because i know you've thought about fraud proofs a bunch)14:31
maakuphantomcircuit: fraud proofs are SPV security.14:31
maakuam I missing something? I'm not sure what you're aiming for14:31
CodeSharkSPV = proof of existence of something with a certain amount of PoW?14:33
katuandytoshi: the two implementations (edwards vs montgomery), but montgomery only with x/z axis seems far simpler / faster to implement14:33
maakuSPV = "assume >50% hashrate is honest"14:33
maakuor perhaps more strictly "no single colluding carte with >50% hashrate"14:34
CodeSharkhmmm - so SPV can also include proving that a UTXO does not exist given the assumption that >50% of hashrate is honest?14:34
maakuCodeShark: sure, have a proof against the commitment in the prior block14:34
phantomcircuitmaaku, the goal is that fraud proofs can be provided by any full node not just the miners14:35
CodeSharkand by "honest" we actually mean "actually validates the blocks it publishes and only publishes valid blocks" right?14:35
CodeSharkwe're ignoring block withholding attacks or other such things14:36
phantomcircuitmaaku, consider that the incentives work because full nodes call bullshit if miners try to do anything pshishy, now consider how many people are using spv clients and what that does to the networks incentive model14:37
andytoshikatu: that page is really hard to understand.14:38
andytoshii'm not certain what me means by "contributory behaviour", though i infer it somehow means "behaviour that does not involve sending low-order points", but his claim that this is irrelevant to DH i think is just wrong14:39
phantomcircuitmaaku, i can see how to do a fraud proof with two utxo commitments and the block14:39
andytoshioh, no, it's not wrong if you're just using the DH secret as a shared secret14:39
phantomcircuitwhich would be an improvement on spv14:39
phantomcircuitbut is still not quite as strong as a full node14:40
andytoshii don't know what it means for a protocol to be "unusual" either. the use of that word sounds like really non-adversarial thinking14:40
-!- justanotheruser [~Justan@unaffiliated/justanotheruser] has quit [Read error: Connection reset by peer]14:42
maakuI'm not sure I see the need to incentivise broadcasts of fraud proofs?14:43
maakuPretty much everyone has an indirect incentive to share fraud proofs of candidate blocks.14:43
-!- justanotheruser [~Justan@unaffiliated/justanotheruser] has joined #bitcoin-wizards14:44
maakuMaybe I'm being dense.14:44
CodeSharktragedy of the commons14:46
CodeShark"I'll let someone else do that"14:47
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has quit [Ping timeout: 256 seconds]14:47
CodeSharkif that "someone else" is a very small number and it is possible to discover the identities, all sorts of potentially ugly scenarios are possible14:48
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has joined #bitcoin-wizards14:48
maakuCodeShark: well in a probabalistic future presumably that's what everyone is doing.14:48
maakuchecking some subset of the utxoset, and relaying fraud proofs14:48
maaku*probabalistic validation future14:48
phantomcircuitmaaku, im more interested in making the fraud proofs as compact and complete as possible14:48
kanzurereducing the number of necessary fraud proof types is very useful thing to do14:49
phantomcircuiti dont see any way to prove that the entries in a utxo commitment have false indexes (if we assume someone is willing to get lots of hashing power to generate say 100 blocks in a row that build on the false commitments)14:49
phantomcircuitkanzure, unfortunately it seems like lots and lots are needed14:50
phantomcircuitbbl14:50
-!- AnoAnon [~AnoAnon@197.39.224.226] has joined #bitcoin-wizards14:54
-!- AnoAnon [~AnoAnon@197.39.224.226] has quit [Max SendQ exceeded]14:54
maakuphantomcircuit: the roots won't match, no?14:55
maakuphantomcircuit: it will come down to spending txid that doesn't exist in the prior commitment or something like that, and a full node could prove that it doesn't exist14:55
kanzurethere have been some proposals that included a rolling window or pruning or something.. when you design the window to be too short/small, you open up various grinding attacks. not sure if this is what phantomcircuit was talking about.14:56
-!- shen_noe [~shen_noe@wired018.math.utah.edu] has quit [Quit: Leaving]14:56
gmaxwellandytoshi: the argument that it's unnecessary is that the low order points are few enough that you cannot use them to extract secret data.14:57
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has quit [Ping timeout: 255 seconds]14:57
phantomcircuitmaaku, that's right the roots won't match but to calculate the root you need to have the full block data between the commitments15:05
phantomcircuitif you can prove that the commitment is fake with less than the full block data between it and the previous commitment15:05
phantomcircuitthen we're talking15:05
CodeSharkby fake you mean "spends an output that either doesn't exist or has already been spent"?15:07
katuandytoshi: chance of hitting em is astronomically low assuming there's no external malleable factor (i suppose on has to be careful when compositing n-of-m signatures in ecschnorr)15:09
gmaxwellkatu: the chance of hitting them is _1_ if someone sends you one.15:10
-!- erasmospunk [~erasmospu@179.43.177.130] has quit [Remote host closed the connection]15:11
gmaxwellThats the same kind of incompetent reasoning that results in pratical vulnerabilities in other ECDH implementations; in this case it's okay (because you don't get enough choices of low order to learn much about the private key), but not because the chance of hitting them is low.15:11
-!- orik [~orik@50-46-139-225.evrt.wa.frontiernet.net] has joined #bitcoin-wizards15:17
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has quit [Ping timeout: 250 seconds]15:18
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has quit [Remote host closed the connection]15:18
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has joined #bitcoin-wizards15:18
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has quit [Ping timeout: 246 seconds]15:26
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has joined #bitcoin-wizards15:27
phantomcircuitCodeShark, i specifically mean, replaces a valid entry in the UTXO with an invalid entry (thus preserving the merkle sum tree values)15:27
phantomcircuitfor example15:27
phantomcircuityou have an entry which is a valid unspent outpoint and the correct amount and script pubkey15:27
phantomcircuitthe attacker replaces that with a non existent outpoint (ie random txid) and the correct amount and the attackers script pubkey15:27
phantomcircuityou can prove they lied only be providing all of the blocks between the last utxo commitment and that block15:28
-!- eudoxia [~eudoxia@r167-56-32-71.dialup.adsl.anteldata.net.uy] has joined #bitcoin-wizards15:28
-!- DougieBot5000 [~DougieBot@unaffiliated/dougiebot5000] has quit [Quit: Leaving]15:28
phantomcircuitwhich isn't as good as a full node which trusts nothing15:28
phantomcircuitgavinand1esen, solve that and i wont oppose much larger blocks15:29
katugmaxwell: yes, luckily djb gave quite clear instructions in that regard - "check your base point input that they're not a twist or trivial order generator"15:29
katugmaxwell: or have i missed something and the pathological cases are not easy to detect (low 3 bits for twist, and 2 constants for the other small orders)15:30
-!- sipa [~pw@2a02:348:86:3011::1] has joined #bitcoin-wizards15:31
gmaxwellkatu: what? that page _specifically_ tells you to do no verification of input points.  (which is actually fine, but for other reasons)15:31
gmaxwell"How do I validate Curve25519 public keys?15:32
gmaxwellDon't. "15:32
katugmaxwell: read further about the bit munging15:32
katuand what to do if you remove it15:32
gmaxwellkatu: I'm not following your comments. The page is completely, blood flowing from eyes, clear.15:33
gmaxwellThe only bit operations discussed on that page are related to secret key generation.15:34
phantomcircuitgmaxwell, i think if there was blood flowing from my eyes i'd have trouble seeing it too15:37
* phantomcircuit runs away15:37
sipahave you actually tried that?15:38
CodeSharkyou have blood vessels always right on your retina but you don't see them because the retina only senses changes15:38
sipathat is by no means equivalent to "blood flowing from eyes" :p15:39
CodeSharkthe blood vessels carry blood away from the eyes, so in a sense it is :p15:39
sipaok, you win!15:39
CodeShark:)15:40
sipaarguable, in a very relevant way: if those vessels weren't pumping blood away, things on that page would go very unclear rapidly15:40
phantomcircuitsipa, i've actually gotten lots of fake bloof in my eyes before15:40
phantomcircuit0/10 would not recommend15:40
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has quit [Ping timeout: 264 seconds]15:40
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has joined #bitcoin-wizards15:41
katugmaxwell: i mean the 'In those protocols, you should reject the 32-byte strings' part. i presume he's talking about public keys.15:42
katugmaxwell: if you input 325606250916557431795983626356110631294008115727848805560023387167927233504 as public key (generator), you'll see order 8. this is presumably ok for DH, but not when it is abused for other uses.15:42
gmaxwellkatu: you ___MUST___ reject low order points for ECDH generally; it just happens to be the case for curve25519 the particular selection of possible low order points is not a set that will cause trouble. But it is not generally true.15:43
gmaxwell(it works in this case because you only get points of order 8,4,2; and your key has been magicked to be a multiple of 8)15:45
gmaxwellbut this is not something which is generally true for ECDH.15:45
gmaxwellAnd failing to validate points generally (outside of this specific setup), _for ecdh_ results in exploitable vulnerability when an attacker sends you points of many different orders and learns your key mod a collection of small primes and can recover the value via chinese remander theorem.15:46
katugmaxwell: still, if both parties announce they have low order public point, hilarity ensues :)15:49
katumy point is, it makes no sense to do that15:49
katuof course this is all in context of 2551915:49
-!- licnep [uid4387@gateway/web/irccloud.com/x-wwmzveanproygckg] has quit [Quit: Connection closed for inactivity]15:49
trompCRT is the attack i use on the order of legal Go positions:)15:49
gmaxwelltromp: I was mind blown with the go position counting stuff. So interesting that the combinitorics is simple enough to yield to analysis like that.15:51
gmaxwellkatu: Just please take care to not generalize what works for one particlar set of parameters for other things.15:52
gwillenlink for the go position stuff?15:52
tromphttp://tromp.github.io/go/legal.html15:52
trompin fact i should have finished the computation by now. were it not for the last 3 jobs all suffering fatal filesystem errors15:53
gmaxwelltromp: I'd seen the paper but I didn't connect that it was you.15:53
gwillentromp: I love that we have the power to do it up to ONE less than the traditional go board size15:54
trompstill hope to finish by Xmas!15:54
gwillen+115:54
gmaxwellnext step should be a go board compression program that converts any legal goboard into a single integer on the range of [zero .. npositions) :)15:55
-!- bramc [~bram@216.216.202.69] has joined #bitcoin-wizards15:55
gmaxwelltromp: I'd offer to help compute but I don't have any cpu farms with oodles of storage handy at the moment!15:56
-!- Jeremy_Rand_ [~jeremy@172.56.14.229] has joined #bitcoin-wizards15:56
-!- Jeremy_Rand_ is now known as Jeremy_Rand15:56
-!- Jeremy_Rand [~jeremy@172.56.14.229] has quit [Client Quit]15:56
trompthat's only saving about 6 bits on the std encoding:(15:56
-!- Jeremy_Rand [~jeremy@172.56.14.229] has joined #bitcoin-wizards15:56
gmaxwelltromp: hahah15:57
trompfortunately your tax dollars help (computation being done at IDA princeton)15:57
-!- rusty [~rusty@pdpc/supporter/bronze/rusty] has joined #bitcoin-wizards15:58
poppingtonic+115:59
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has quit [Remote host closed the connection]16:00
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has joined #bitcoin-wizards16:01
phantomcircuittromp, something something academics wasting money heh16:01
trompi can't think of a better use of my tax dollars:)16:02
phantomcircuithehe16:02
-!- Newyorkadam [~Newyorkad@wikipedia/Newyorkadam] has joined #bitcoin-wizards16:05
-!- eudoxia [~eudoxia@r167-56-32-71.dialup.adsl.anteldata.net.uy] has quit [Remote host closed the connection]16:10
-!- rusty [~rusty@pdpc/supporter/bronze/rusty] has quit [Ping timeout: 240 seconds]16:12
-!- nwilcox [~nwilcox@50-1-85-32.dsl.dynamic.fusionbroadband.com] has quit [Ping timeout: 264 seconds]16:16
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has joined #bitcoin-wizards16:18
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has quit [Remote host closed the connection]16:29
-!- Jeremy_Rand [~jeremy@172.56.14.229] has quit [Read error: Connection reset by peer]16:30
-!- dEBRUYNE [~dEBRUYNE@56-197-ftth.onsbrabantnet.nl] has quit [Ping timeout: 244 seconds]16:31
-!- Jeremy_Rand [~jeremy@172.56.14.229] has joined #bitcoin-wizards16:32
-!- DougieBot5000 [~DougieBot@unaffiliated/dougiebot5000] has joined #bitcoin-wizards16:32
-!- Yoghur114 [~jorn@g227014.upc-g.chello.nl] has quit [Remote host closed the connection]16:39
-!- CodeShark [~CodeShark@cpe-76-167-237-202.san.res.rr.com] has quit [Ping timeout: 272 seconds]16:42
-!- Fistful_of_Coins [o3u@162.243.79.19] has joined #bitcoin-wizards16:43
-!- shen_noe [~shen_noe@wired018.math.utah.edu] has joined #bitcoin-wizards16:45
-!- shen_noe [~shen_noe@wired018.math.utah.edu] has quit [Client Quit]16:46
-!- Jeremy_Rand_ [~jeremy@172.56.14.39] has joined #bitcoin-wizards16:56
bramctromp Zero-knowledge proof or it didn't happen16:56
-!- Jeremy_Rand [~jeremy@172.56.14.229] has quit [Ping timeout: 244 seconds]16:56
-!- Newyorkadam [~Newyorkad@wikipedia/Newyorkadam] has quit [Quit: Newyorkadam]17:01
-!- c0rw|awa_ is now known as c0rw1n17:01
-!- Burrito [~Burrito@unaffiliated/burrito] has quit [Ping timeout: 272 seconds]17:02
-!- rusty [~rusty@pdpc/supporter/bronze/rusty] has joined #bitcoin-wizards17:06
-!- mdavid613 [~Adium@cpe-104-172-191-85.socal.res.rr.com] has quit [Quit: Leaving.]17:08
-!- Jeremy_Rand_ [~jeremy@172.56.14.39] has quit [Ping timeout: 256 seconds]17:15
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has joined #bitcoin-wizards17:16
-!- jtimon [~quassel@212.Red-88-5-10.dynamicIP.rima-tde.net] has quit [Ping timeout: 255 seconds]17:30
-!- Giszmo [~leo@pc-36-133-241-201.cm.vtr.net] has quit [Quit: Leaving.]17:31
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has quit [Remote host closed the connection]17:32
instagibbsI for one welcome our new Go-playing computer overlords17:32
gmaxwellwell they don't play, only count. :P17:35
-!- mdavid613 [~Adium@cpe-104-35-146-84.socal.res.rr.com] has joined #bitcoin-wizards17:37
bramcMathematical proofs are short enough that it would be entirely feasible to generate ZK proofs that a proof of a particular theorem passed a verifier. Univalent foundations are apparently totally practical, the guy who came up with them who does some very deep category-theory-like stuff does his day to day work using them now.17:37
bramcHopefully it's only a matter of time before mathematicians not computer-verifying their proofs is viewed like programmers not getting their code to compile.17:39
gmaxwellvery few proofs are computer verfied now, though.. one could hope... it turns out that formal mathmathical writing is often not formal enough to make the process easy!17:40
bramcHere's a little light reading for anybody curious about proofs of space: http://eprint.iacr.org/2013/796.pdf17:40
bramcgmaxwell, There's a combination of needing a tool which is sufficiently easy to use and the inherent difficulty of the task. For a long time code proving systems were the moral equivalent of machine code. They're much better now, although I don't know if any rises to be the moral equivalent of Python.17:42
bramcAs for the inherent difficulties, people should finish their homework! While formality is harder than just writing down the proof, it's probably easier than the effort of the proof plus review plus headaches caused when the whole process goes awry.17:43
bramcIt would be so nice if normal mathematical work was done on the mathwiki which people uploaded proofs to which were automatically verified.17:47
-!- bendavenport [~bpd@96.90.231.161] has quit [Quit: bendavenport]17:47
bramcReally dumb question about memory management: If you're doing work on multiple places in deep memory for n pieces of memory, does it start forcing cache misses at some fixed n? If so, what is the n? Is 2 safe? 3? 10?17:50
bramcSo far on my merkle data structure, I've decided that (a) when doing a batched insertion/deletion, rather than recalculating things as it does an update, it will invalidate hashes as necessary and do a lazy recalculation from the root once it's all completed. This is in principle more cache misses, but I really, really, don't feel like implementing it the 'right' way.17:53
bramc(b) Related to that, when doing a batched update it will sort the individual updates and do them in order mostly separately, using the path from the root for the last one to reduce lookups for the next one, basically starting at the bottom and working up until a common ancestor is hit, but it's treated as advisory.17:55
bramcCome to think of it, maybe I should view (b) as another optimization which I don't need to do because I'm already doing the clumping to avoid cache misses, and depending on a few things it might be faster to search from the top than the bottom, so I should just punt and search from the top every time17:56
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has joined #bitcoin-wizards17:57
gmaxwellI many not understand the question. So modern CPU L2/L3 cache are set associative caches, 16-way is common. so, if I parse your question right, n=16 if the stars align and nothing else gets in the waay.17:58
gmaxweller many->may. waay->way*17:58
bramcSomething which seems vaguely aesthetically related, today I learned that the best technique anyone has come up with for making chess engines run on multiple cores is something called lazy-smp, which is fancy talk for 'give them no knowledge of each other but have them use the same cache of positions', which sounds an awful lot like something an idiot hacker who didn't know what he was doing would do, but it's fabulous and getting coordination overhe17:58
bramcad under control and works well in practice.17:58
-!- kgk_ [~kgk@173-167-115-138-sfba.hfc.comcastbusiness.net] has quit [Ping timeout: 256 seconds]17:58
bramcgmaxwell, Thanks that answered my question, that's very reassuring.17:58
Taekmaaku, bramc, phantomcircuit: can someone volunteer to check out and contribute to the knosys page on utxo commitments?18:00
gmaxwellhardware designers are no fools. :)18:00
Taekhttps://github.com/DavidVorick/knosys/blob/master/Utxo%20Commitments.md18:00
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has quit [Remote host closed the connection]18:00
-!- mdavid613 [~Adium@cpe-104-35-146-84.socal.res.rr.com] has quit [Quit: Leaving.]18:02
bramcThat allows me to be extremely sloppy about a number of things and everything will still work well.18:02
bramcMemoization really feels like magic pixie dust. Don't worry about the nominal asymptotic, just add this weird subtlety to your seemingly horrifically inefficient algorithm and everything will be fine.18:03
-!- AaronvanW [~ewout@unaffiliated/aaronvanw] has quit [Ping timeout: 246 seconds]18:04
bramcTaek, Not related to anything cryptocurrency, one of my kids has gotten really into martial arts, specifically kajukembo18:05
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has joined #bitcoin-wizards18:05
gmaxwellbramc: there are other details to worry about for highest performance, e.g. memory accesses do not have byte granularity, -- you load (and cache) a full cacheline at a time (typically 64 or even 128 bytes) so cacheline spanning reads can force the load of two cachelines,  memory accesses which are paged misaligned (e.g. cross a 4k boundary in a single read) have higher overhead (at least on x86).18:06
gmaxwell.. in general access to different pages can cause pressure on the TLB caches. ...18:06
-!- sparetire_ [~sparetire@unaffiliated/sparetire] has quit [Quit: sparetire_]18:06
phantomcircuitTaek, that seems like a nice list already18:07
bramcTaek, I don't have much to add to that page, although the intention for what I'm working on now is for it to be put up later as something which should be linked from that page, but at least at first it will have some truly obnoxious caveats like 'this should really be ported to C'18:07
-!- kgk_ [~kgk@173-167-115-138-sfba.hfc.comcastbusiness.net] has joined #bitcoin-wizards18:07
TaekI do hope we can get a culture going where people collect knowledge as they learn or create it18:08
bramcgmaxwell, What I'm doing now is ugly enough without even trying to worry about that level of optimization. It's so much better than the thing which already exists, and those optimization are difficult enough with small enough potential benefit, that I'm just going to punt18:08
Taekie, bramc: once you have a proposal that's mostly good (even if incomplete), you should add it18:09
TaekOne thing definitely missing from that page is the channel logs on the subject18:09
bramcTaek, I really, really, don't feel comfortable putting it up until it's at least a working implementation, because the whole point is that it's supposed to be semantically compatible with what maaku's already done.18:09
phantomcircuitTaek, im not sure my thinking on utxo commitments qualifies as knowledge yet :)18:10
bramcphantomcircuit, I believe our last conversation on the subject basically amount to you already knowing about the stuff I'm working on but haven't done it because you've been hoping some sucker would go through all the pain, and that would apparently be me.18:11
phantomcircuitrusty, so i was thinking, could back refs in the utxo enable fraud proofs for false utxo commitments without needing to check the entire blockchain?18:11
rustyphantomcircuit: ummm... maybe18:12
phantomcircuitie "this utxo entry was added in block a" "ok i can prove that it wasn't"18:12
phantomcircuitrusty, yeah that's kind of been my response to most of these things18:12
bramcRight now I'm stumbling over where and how the sibling relationships between blocks should be stored18:13
-!- kgk_ [~kgk@173-167-115-138-sfba.hfc.comcastbusiness.net] has quit [Ping timeout: 255 seconds]18:13
-!- Ylbam [uid99779@gateway/web/irccloud.com/x-upqwkcyzshifosnk] has quit [Quit: Connection closed for inactivity]18:14
bramcI have this concept of a 'block' which is a contiguous chunk of memory in which related tree nodes are stored. Memory management within a block is that new stuff is always added to the end, and when it runs out of room it consolidates down all the memory used within itself to be contiguous again and if necessary moves some stuff into a sibling block and if that isn't possible moves some stuff into a child block18:15
-!- King_Rex [~King_Rex@unaffiliated/king-rex/x-3258444] has quit [Remote host closed the connection]18:15
bramcConsolidating a block isn't such a big deal, it only involves rewriting the parent and the original, so it can be done more than necessary in the name of efficiency.18:15
bramcWhen you add something new, you try to add it to the same block as the parent node. That's where all the cache coherence efficiency comes from.18:17
-!- kgk_ [~kgk@173-167-115-138-sfba.hfc.comcastbusiness.net] has joined #bitcoin-wizards18:18
bramcTo move stuff to a sibling block, you look at the inputs and try to find the inputs with the smallest number of local children and move enough of them that you locally have free space up to some threshold (I'm thinking 15% as a default) into a sibling block with enough free space to accomodate them, and if there is no such sibling block you make a new one18:19
bramcAnd if there's only one input into the current block you lop off a branch and move it into a child.18:19
bramcDoes this make sense to people or am I babbling?18:19
bramcCome to think of it, a whole lot of accounting of sibling blocks can be done in the parent by (a) having each node remember how many children it has, and (b) have a rule that blocks never, ever have children unless they only have a single input18:21
bramcAnd the count information only needs to be in out-pointers, so it isn't all that much overhead18:24
bramcAlthough that does mean that counts can't be updated lazily, but that isn't a big deal.18:25
bramcOne thing about this block concept is that I've decided to just plain support variable length node data structures, which in some ways is a huge pain but in others is a huge relief.18:26
bramcCome to think of it, my previous idea that the best way to add a child node is to lop off a single branch is 100% wrong. The best way to add a child node is to trim off a bunch of leaves, to try to keep the depths consistent.18:28
bramcIs anybody following this, or am I explaining things to the bear?18:28
kanzurewell, i was going to reference some of these notes later when i look at whatever code you haven't released yet18:29
bramckanzure, Fair enough. This is basically documentation which should go on my code to explain what on earth is going on.18:31
bramcReally this should be a data structure on par with an ordinary set, meaning hardly anyone should look under the hood, for there be dragons.18:32
bramcI'm still working on the highly level view of what data goes where, but I think I just got over my last major stumbling block and am almost ready to start designing things at the byte level.18:34
bramcAlmost. Still need to work some stuff out about thresholds and block restructuring. Block restructuring is a somewhat expensive operation, but it's done batched only when certain thresholds are exceeded at a tradeoff between cost of reorgs and amount of memory overhead which is needed for book processing18:37
bramcBit of trivia: Traditional libraries need about 1/3 of their floorspace devoted to book processing. The San Francisco Library was designed by a marquee name architect who couldn't be bothered to do his research and only allocated 1/10.18:38
kanzurewould also be good to make strong concrete statements about what the merkle root can be trusted to prove and not prove when given various paths, or rather, assumptions that would violate the security of the strategy18:39
kanzure*assumptions that when broken18:39
bramckanzure, I'm going to make it semantically identical to what maaku has already built, just more space efficient and allowing for batched updates with less hashing and fewer cache misses18:40
-!- afk11 [~afk11@unaffiliated/afk11] has quit [Ping timeout: 252 seconds]18:41
bramcWell isn't that special. Ping time to facebook from this coffee shop is 70ms with zero packet loss, but facebook pages, and only facebook pages, load slow as molasses.18:51
rustykanzure: I'm impressed with your abilty (and jgarzik's) to hang out here while simultaneously moderating those 6 emails!18:54
-!- afk11 [~afk11@unaffiliated/afk11] has joined #bitcoin-wizards18:55
kanzurerusty: i thought it was 150?18:56
kanzurewhat?18:56
rustykanzure: I cut it down...18:56
kanzureah, i've been drafting an email to the fastest typer in the world18:57
kanzurei'll uh.. speed things up.18:57
rustykanzure: start responding with "have you considered the following: <random academic citations>".  I find it's helpful to slow down conversations :)18:57
bramcI'm on approximately zero mailing lists. The semantics that nobody should expect that I've seen anything unless I respond to it are very useful.19:00
kanzuredoes that include bitcoin-dev?19:00
rustykanzure: uhh... have you considered H. Massias, X.S. Avila, and J.-J. Quisquater, "Design of a secure timestamping service with minimaltrust requirements," In 20th Symposium on Information Theory in the Benelux, May 1999?19:03
kanzureyeah i binged on timestamping server papers a while back19:04
-!- p15 [~p15@96.91.145.64.client.static.strong-tk2.bringover.net] has joined #bitcoin-wizards19:04
kanzurehttp://diyhpl.us/~bryan/papers2/distributed/distributed-systems/timestamps-in-messaging-passing-systems.1988.pdf19:05
kanzurehttp://diyhpl.us/~bryan/papers2/bitcoin/Design%20of%20a%20secure%20timestamping%20system%20with%20minimal%20trust%20requirements.pdf19:05
bramcActually it isn't necessary for nodes to have a strict 'no children unless a single input' rule19:06
bramcblocks I mean, not nodes19:06
bramcManual territory-based memory management. Whee. It's like I'm implementing PHP.19:06
bramcmaaku is there a single page which explains the byte-level semantics of your merkle tree implementation without any implementation details?19:07
-!- c0rw1n is now known as c0rw|zZz19:09
-!- poppingtonic [~Thunderbi@unaffiliated/poppingtonic] has quit [Ping timeout: 250 seconds]19:14
-!- poppingtonic [~Thunderbi@unaffiliated/poppingtonic] has joined #bitcoin-wizards19:17
-!- koshii [~w@c-68-58-151-30.hsd1.in.comcast.net] has quit [Ping timeout: 256 seconds]19:22
-!- koshii [~w@c-68-58-151-30.hsd1.in.comcast.net] has joined #bitcoin-wizards19:22
-!- chris13243 [~chris@70.6.233.237] has joined #bitcoin-wizards19:34
-!- orik [~orik@50-46-139-225.evrt.wa.frontiernet.net] has quit [Quit: My Mac has gone to sleep. ZZZzzz…]19:43
-!- chris13243 [~chris@70.6.233.237] has quit [Ping timeout: 260 seconds]19:44
-!- bramc [~bram@216.216.202.69] has quit [Quit: This computer has gone to sleep]19:49
-!- CodeShark [~androirc@cpe-76-167-237-202.san.res.rr.com] has joined #bitcoin-wizards19:53
-!- CodeShark_ [~androirc@cpe-76-167-237-202.san.res.rr.com] has joined #bitcoin-wizards19:54
-!- berndj [~berndj@azna.co.za] has quit [Quit: ZNC - http://znc.in]19:54
-!- berndj [~berndj@azna.co.za] has joined #bitcoin-wizards19:55
-!- berndj is now known as Guest6045719:55
-!- CodeShark [~androirc@cpe-76-167-237-202.san.res.rr.com] has quit [Client Quit]19:55
-!- CodeShark_ [~androirc@cpe-76-167-237-202.san.res.rr.com] has quit [Client Quit]19:55
-!- CodeShark [~androirc@cpe-76-167-237-202.san.res.rr.com] has joined #bitcoin-wizards19:56
-!- Guest60457 [~berndj@azna.co.za] has quit [Max SendQ exceeded]19:56
-!- berndj-blackout [~berndj@azna.co.za] has joined #bitcoin-wizards19:57
-!- berndj-blackout [~berndj@azna.co.za] has quit [Max SendQ exceeded]19:57
-!- berndj-blackout [~berndj@azna.co.za] has joined #bitcoin-wizards19:57
-!- berndj-blackout [~berndj@azna.co.za] has quit [Max SendQ exceeded]19:58
-!- berndj-blackout [~berndj@azna.co.za] has joined #bitcoin-wizards19:58
-!- berndj-blackout [~berndj@azna.co.za] has quit [Max SendQ exceeded]20:00
-!- berndj-blackout [~berndj@azna.co.za] has joined #bitcoin-wizards20:01
-!- berndj-blackout [~berndj@azna.co.za] has quit [Max SendQ exceeded]20:02
-!- berndj-blackout [~berndj@azna.co.za] has joined #bitcoin-wizards20:03
-!- zwischenzug3 [~zwischenz@pool-108-31-99-35.washdc.fios.verizon.net] has joined #bitcoin-wizards20:04
-!- hazirafel [~hazirafel@176.106.227.34] has joined #bitcoin-wizards20:06
-!- hazirafel [~hazirafel@176.106.227.34] has quit [Client Quit]20:06
-!- ufoinc [~hazirafel@176.106.227.34] has joined #bitcoin-wizards20:06
-!- berndj-blackout [~berndj@azna.co.za] has quit [Max SendQ exceeded]20:07
-!- berndj-blackout [~berndj@azna.co.za] has joined #bitcoin-wizards20:08
-!- berndj-blackout [~berndj@azna.co.za] has quit [Max SendQ exceeded]20:09
-!- TheSeven [~quassel@rockbox/developer/TheSeven] has quit [Disconnected by services]20:22
-!- [7] [~quassel@rockbox/developer/TheSeven] has joined #bitcoin-wizards20:23
-!- CodeShark [~androirc@cpe-76-167-237-202.san.res.rr.com] has quit [Read error: Connection reset by peer]20:29
-!- CodeShark [~androirc@cpe-76-167-237-202.san.res.rr.com] has joined #bitcoin-wizards20:29
-!- afk11 [~afk11@unaffiliated/afk11] has quit [Ping timeout: 250 seconds]20:33
-!- ufoinc [~hazirafel@176.106.227.34] has quit [Quit: Leaving]20:37
-!- bramc [~bram@99-75-88-206.lightspeed.sntcca.sbcglobal.net] has joined #bitcoin-wizards20:40
-!- hazirafel [~hazirafel@176.106.227.34] has joined #bitcoin-wizards20:44
-!- hazirafel [~hazirafel@176.106.227.34] has quit [Client Quit]20:45
-!- kgk_ [~kgk@173-167-115-138-sfba.hfc.comcastbusiness.net] has quit [Ping timeout: 256 seconds]20:48
-!- poppingtonic [~Thunderbi@unaffiliated/poppingtonic] has quit [Ping timeout: 252 seconds]21:04
-!- cholbrow [~cholbrow@blackmain.media.mit.edu] has quit [Ping timeout: 272 seconds]21:05
-!- cholbrow [~cholbrow@blackmain.media.mit.edu] has joined #bitcoin-wizards21:06
-!- poppingtonic [~Thunderbi@unaffiliated/poppingtonic] has joined #bitcoin-wizards21:07
-!- zwischenzug3 [~zwischenz@pool-108-31-99-35.washdc.fios.verizon.net] has quit [Ping timeout: 264 seconds]21:12
-!- chris13243 [~chris@174.144.29.208] has joined #bitcoin-wizards21:22
-!- mjerr [~mjerr@p5B209E67.dip0.t-ipconnect.de] has joined #bitcoin-wizards21:26
-!- CodeShark_ [~androirc@cpe-76-167-237-202.san.res.rr.com] has joined #bitcoin-wizards21:31
-!- nsh [~lol@wikipedia/nsh] has quit [Excess Flood]21:34
-!- CodeShark [~androirc@cpe-76-167-237-202.san.res.rr.com] has quit [Ping timeout: 256 seconds]21:36
-!- matsjj [~matsjj@lw.serv66.quikefall.com] has joined #bitcoin-wizards21:37
-!- nsh [~lol@wikipedia/nsh] has joined #bitcoin-wizards21:41
-!- kgk_ [~kgk@173-167-115-138-sfba.hfc.comcastbusiness.net] has joined #bitcoin-wizards21:45
-!- kgk_ [~kgk@173-167-115-138-sfba.hfc.comcastbusiness.net] has quit [Ping timeout: 265 seconds]21:50
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has joined #bitcoin-wizards21:55
-!- chris13243 [~chris@174.144.29.208] has quit [Ping timeout: 255 seconds]21:57
-!- CodeShark [~androirc@cpe-76-167-237-202.san.res.rr.com] has joined #bitcoin-wizards22:01
-!- poppingtonic [~Thunderbi@unaffiliated/poppingtonic] has quit [Ping timeout: 250 seconds]22:17
-!- TBI__ [~TBI@20.84-48-195.nextgentel.com] has quit [Ping timeout: 246 seconds]22:19
-!- tromp__ [~tromp@rtc35-217.rentec.com] has joined #bitcoin-wizards22:44
-!- tromp [~tromp@rtc35-217.rentec.com] has quit [Remote host closed the connection]22:45
-!- nivah [~linker@171.232.51.106] has quit [Ping timeout: 252 seconds]23:01
-!- orik [~orik@50-46-139-225.evrt.wa.frontiernet.net] has joined #bitcoin-wizards23:02
-!- Ylbam [uid99779@gateway/web/irccloud.com/x-zpbkhnefbiobmuzl] has joined #bitcoin-wizards23:16
-!- TBI [~TBI@20.84-48-195.nextgentel.com] has joined #bitcoin-wizards23:17
-!- chris13243 [~chris@70.1.67.189] has joined #bitcoin-wizards23:19
-!- ThomasV [~ThomasV@unaffiliated/thomasv] has quit [Ping timeout: 252 seconds]23:21
-!- p15 [~p15@96.91.145.64.client.static.strong-tk2.bringover.net] has quit [Ping timeout: 255 seconds]23:34
-!- poppingtonic [~Thunderbi@unaffiliated/poppingtonic] has joined #bitcoin-wizards23:39
-!- rusty [~rusty@pdpc/supporter/bronze/rusty] has quit [Ping timeout: 255 seconds]23:40
-!- midnightmagic [~midnightm@unaffiliated/midnightmagic] has quit [Ping timeout: 250 seconds]23:42
fluffyponyhttp://eprint.iacr.org/2015/1002.pdf23:42
fluffypony.title23:42
yoleauxfluffypony: Sorry, that doesn't appear to be an HTML page.23:42
fluffypony"On the (in)security of a Self-Encrypting Drive series"23:42
fluffyponyhopefully nobody here uses WD's "self-encrypting" hard drives23:43
gmaxwellwait. ram leakage? .. that suggest the encryption was actually encryption! shocking!23:45
-!- kgk_ [~kgk@173-167-115-138-sfba.hfc.comcastbusiness.net] has joined #bitcoin-wizards23:45
fluffypony"At any point in time an attacker can implement an attack with a complexity of 28 to bruteforce the current state of the 255 byte RNG sequence generated from the on-board LSFR"23:46
fluffypony"Another fact that dramatically reduces the possible UNIX timestamp range is the fact that all HDDs are marked with a production date printed on the actual HDD. The factory DEKF must have been generated close to this date. Our test devices show that the factory DEKF set was generated within days after the HDD production date. We did not take advantage of this fact since the complexity of the attack was already easy to handle for23:46
fluffypony all possible timestamps. However, this fact might apply to other chips, where the on-board RNG has a higher complexity compared to the JMS538S."23:46
fluffyponyI wonder if any of the Bitcoin hardware wallets suffer from something like that23:46
-!- midnightmagic [~midnightm@unaffiliated/midnightmagic] has joined #bitcoin-wizards23:47
gmaxwellfluffypony: so I'm surprised that it was even that strong;  though given that it wasn't pure snake oil.. with all that fancy DSP controlled stuff, you think they could have gotten a nice mechnical randomness source-- e.g. the servo error signal, or data read noise.23:47
fluffyponyI know right23:48
fluffyponythey could have used spin times and all sorts23:48
-!- kgk_ [~kgk@173-167-115-138-sfba.hfc.comcastbusiness.net] has quit [Ping timeout: 252 seconds]23:49
-!- RedEmerald [~RedEmeral@2601:646:4100:c5:11:cdff:fe00:1a0b] has quit [Ping timeout: 250 seconds]23:52
-!- chris13243 [~chris@70.1.67.189] has quit [Ping timeout: 246 seconds]23:57
gmaxwellfluffypony: well apparently its some usb bridge, e.g. no access to the sweet mechnical noise.23:59
--- Log closed Wed Oct 21 00:00:02 2015

Generated by irclog2html.py 2.15.0.dev0 by Marius Gedminas - find it at mg.pov.lt!