Bitcoin Forum
April 24, 2024, 10:53:12 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: SPV with simple Fraud Hints  (Read 598 times)
tomtomtom7 (OP)
Jr. Member
*
Offline Offline

Activity: 38
Merit: 18


View Profile
May 16, 2017, 10:17:31 AM
 #1

I would like to better understand the problem of fraud proofs and false flagging fraud hints with normal SPV (headers only+merkle branch).

I understand the two difficult cases:

* A transaction included that references a non-existing output. Absence of the referenced tx cannot be proven.
* A TXID included of a non-existent transaction, and a transaction is included that references it. This also cannot be proven.

Now both these cases can only be *hinted*, and it is said that to verify such (cheaply faked) hints, the SPV falls back to full node.

But what if the SPV simply registers the hint for a transaction in block N, and uses this hint to ensure every received transaction in block >= N must request all ancestors up to block N-1 for verification?

Requesting ancestors seems no bad practice, so this makes both false flagging attacks as well as attacks using invalid blocks unfeasible, and protected by normal anti-DoS measures.

What am I missing here? Why does the SPV need to fall back to full node?
1713955992
Hero Member
*
Offline Offline

Posts: 1713955992

View Profile Personal Message (Offline)

Ignore
1713955992
Reply with quote  #2

1713955992
Report to moderator
1713955992
Hero Member
*
Offline Offline

Posts: 1713955992

View Profile Personal Message (Offline)

Ignore
1713955992
Reply with quote  #2

1713955992
Report to moderator
1713955992
Hero Member
*
Offline Offline

Posts: 1713955992

View Profile Personal Message (Offline)

Ignore
1713955992
Reply with quote  #2

1713955992
Report to moderator
According to NIST and ECRYPT II, the cryptographic algorithms used in Bitcoin are expected to be strong until at least 2030. (After that, it will not be too difficult to transition to different algorithms.)
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
tomtomtom7 (OP)
Jr. Member
*
Offline Offline

Activity: 38
Merit: 18


View Profile
May 18, 2017, 08:45:34 AM
 #2

Can anybody help me with this?

I think we even make it standard for SPV nodes to require the ancestors up to N  blocks in the past, to further the diminish costs of false flags.

I don't understand how either false hinting, or invalid blocks by tx withholding can harm that way.

Doesn't this make SPV fully resilient to any miner attack?
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!