Subject: Re: [bitcoin-dev] Time to worry about 80-bit collision attacks or not?

From: Gavin Andresen <[email-masked]>
Date: Fri, 8 Jan 2016 10:46:53 -0500

Thanks, Anthony, that works!

So...

How many years until we think a 2^84 attack where the work is an ECDSA
private->public key derivation will take a reasonable amount of time?

And Ethan or Anthony:  can you think of a similar attack scheme if you
assume we had switched to Schnorr 2-of-2 signatures by then?

And to everybody who might not be reading this closely:  All of the above
is discussing collision attacks; none of it is relevant in the normal case
where your wallet generates the scriptPubKey.

-- 
--
Gavin Andresen