Subject: Re: [bitcoin-dev] Lamport scheme (not signature) to economize on L1

From: Nagaev Boris <[email-masked]>
Date: Mon, 18 Dec 2023 21:45:45 -0300

On Mon, Dec 18, 2023 at 7:44 PM <[email-masked]> wrote:
>
> I beg to disagree: key owner broadcasts first bundle (let's call it this way) so that it is on any miner's best interest to include said bundle on their's attempted coinbase because they know if they don't any other competing miner will in the next block.

What if an attacker broadcasts the first bundle? He spent a lot of
time cracking the hash which is the part of the address in the
proposed scheme. Then he cracked the second layer of hashing to have
both hashes ready. If the utxo has enough sats, the attack is
economically viable.

-- 
Best regards,
Boris Nagaev