NXT :: descendant of Bitcoin - Updated Information

[wesleyh]

How does one sign a transaction on the client side instead of sending the password in the clear to the server? Any info on this?

[coolmist]

Passion_LTC, for there to be a remote chance in hell of people entering their password on your site you need ssl and client side asymmetric encryption with secure server side decryption.

Code:

function RSAKeyPair(encryptionExponent, decryptionExponent, modulus)
{
	this.e = biFromHex(encryptionExponent);
	this.d = biFromHex(decryptionExponent);
	this.m = biFromHex(modulus);

	this.chunkSize = 2 * biHighIndex(this.m);
	this.radix = 16;
	this.barrett = new BarrettMu(this.m);
}

function twoDigit(n)
{
	return (n < 10 ? "0" : "") + String(n);
}

function encryptedString(key, s)
{
	var a = new Array();
	var sl = s.length;
	var i = 0;
	while (i < sl) {
		a[i] = s.charCodeAt(i);
		i++;
	}

	while (a.length % key.chunkSize != 0) {
		a[i++] = 0;
	}

	var al = a.length;
	var result = "";
	var j, k, block;
	for (i = 0; i < al; i += key.chunkSize) {
		block = new BigInt();
		j = 0;
		for (k = i; k < i + key.chunkSize; ++j) {
			block.digits[j] = a[k++];
			block.digits[j] += a[k++] << 8;
		}
		var crypt = key.barrett.powMod(block, key.e);
		var text = key.radix == 16 ? biToHex(crypt) : biToString(crypt, key.radix);
		result += text + " ";
	}
	return result.substring(0, result.length - 1); // Remove last space.
}

function decryptedString(key, s)
{
	var blocks = s.split(" ");
	var result = "";
	var i, j, block;
	for (i = 0; i < blocks.length; ++i) {
		var bi;
		if (key.radix == 16) {
			bi = biFromHex(blocks[i]);
		}
		else {
			bi = biFromString(blocks[i], key.radix);
		}
		block = key.barrett.powMod(bi, key.d);
		for (j = 0; j <= biHighIndex(block); ++j) {
			result += String.fromCharCode(block.digits[j] & 255,
			                              block.digits[j] >> 8);
		}
	}

	if (result.charCodeAt(result.length - 1) == 0) {
		result = result.substring(0, result.length - 1);
	}
	return result;
}

Code:

function BarrettMu(m)
{
	this.modulus = biCopy(m);
	this.k = biHighIndex(this.modulus) + 1;
	var b2k = new BigInt();
	b2k.digits[2 * this.k] = 1; // b2k = b^(2k)
	this.mu = biDivide(b2k, this.modulus);
	this.bkplus1 = new BigInt();
	this.bkplus1.digits[this.k + 1] = 1; // bkplus1 = b^(k+1)
	this.modulo = BarrettMu_modulo;
	this.multiplyMod = BarrettMu_multiplyMod;
	this.powMod = BarrettMu_powMod;
}

function BarrettMu_modulo(x)
{
	var q1 = biDivideByRadixPower(x, this.k - 1);
	var q2 = biMultiply(q1, this.mu);
	var q3 = biDivideByRadixPower(q2, this.k + 1);
	var r1 = biModuloByRadixPower(x, this.k + 1);
	var r2term = biMultiply(q3, this.modulus);
	var r2 = biModuloByRadixPower(r2term, this.k + 1);
	var r = biSubtract(r1, r2);
	if (r.isNeg) {
		r = biAdd(r, this.bkplus1);
	}
	var rgtem = biCompare(r, this.modulus) >= 0;
	while (rgtem) {
		r = biSubtract(r, this.modulus);
		rgtem = biCompare(r, this.modulus) >= 0;
	}
	return r;
}

function BarrettMu_multiplyMod(x, y)
{
	/*
	x = this.modulo(x);
	y = this.modulo(y);
	*/
	var xy = biMultiply(x, y);
	return this.modulo(xy);
}

function BarrettMu_powMod(x, y)
{
	var result = new BigInt();
	result.digits[0] = 1;
	var a = x;
	var k = y;
	while (true) {
		if ((k.digits[0] & 1) != 0) result = this.multiplyMod(result, a);
		k = biShiftRight(k, 1);
		if (k.digits[0] == 0 && biHighIndex(k) == 0) break;
		a = this.multiplyMod(a, a);
	}
	return result;
}

Code:

function RSAKeyPair(encryptionExponent, decryptionExponent, modulus)
{
	this.e = biFromHex(encryptionExponent);
	this.d = biFromHex(decryptionExponent);
	this.m = biFromHex(modulus);

	this.chunkSize = 2 * biHighIndex(this.m);
	this.radix = 16;
	this.barrett = new BarrettMu(this.m);
}

function twoDigit(n)
{
	return (n < 10 ? "0" : "") + String(n);
}

function encryptedString(key, s)
	
{
	var a = new Array();
	var sl = s.length;
	var i = 0;
	while (i < sl) {
		a[i] = s.charCodeAt(i);
		i++;
	}

	while (a.length % key.chunkSize != 0) {
		a[i++] = 0;
	}

	var al = a.length;
	var result = "";
	var j, k, block;
	for (i = 0; i < al; i += key.chunkSize) {
		block = new BigInt();
		j = 0;
		for (k = i; k < i + key.chunkSize; ++j) {
			block.digits[j] = a[k++];
			block.digits[j] += a[k++] << 8;
		}
		var crypt = key.barrett.powMod(block, key.e);
		var text = key.radix == 16 ? biToHex(crypt) : biToString(crypt, key.radix);
		result += text + " ";
	}
	return result.substring(0, result.length - 1); // Remove last space.
}

function decryptedString(key, s)
{
	var blocks = s.split(" ");
	var result = "";
	var i, j, block;
	for (i = 0; i < blocks.length; ++i) {
		var bi;
		if (key.radix == 16) {
			bi = biFromHex(blocks[i]);
		}
		else {
			bi = biFromString(blocks[i], key.radix);
		}
		block = key.barrett.powMod(bi, key.d);
		for (j = 0; j <= biHighIndex(block); ++j) {
			result += String.fromCharCode(block.digits[j] & 255,
			                              block.digits[j] >> 8);
		}
	}
	// Remove trailing null, if any.
	if (result.charCodeAt(result.length - 1) == 0) {
		result = result.substring(0, result.length - 1);
	}
	return result;
}

[Eadeqa]

Introducing tipNXT.com

With tipNXT.com you can tip any Nxt user worldwide!

I hope that this service will be used often! Thank you very much.

I don't get it. Why would I want to use this, enter my account secret via non-SSL, when I can tip an account with any client?

Somebody would have to be f@#King insane to use this service.  Hey, nothing personal, Passion_ltc !

Things like this require local signing and only the signed transaction then is broadcast to the server.

 We need more  software (local clients, javascript code) that the websites like the above can use where user signs the transaction on his own machine.

Now instead of wasting "bounties" and time on insecure voodoo ideas like plugins, scripting VM, this is something that is really useful. Basically it would mean you can connect to any online server/service (like tipNXT.com) and use it safely as you will never broadcast your password over the internet.

Where is the bounty on that?

This should have 100K+ bounty and it should be implemented in such a way that any site or client can use it.

[Come-from-Beyond]

How does one sign a transaction on the client side instead of sending the password in the clear to the server? Any info on this?

I'm working on this. The workflow will look like:

1. U use prepareTransaction API call that returns raw bytes
2. U sign the bytes and inject the signature into them
3. U use broadcastTransaction to send the transaction

[Come-from-Beyond]

On the 11th of Feb we r launching public test of Asset Exchange. Do we have at least 1 client ready for that? What platforms does it support?

[pinarello]

blockchain explorer node 87.230.14.1 still runs on 0.5.11

does this effect the blockchain explorer?

[Come-from-Beyond]

blockchain explorer node 87.230.14.1 still runs on 0.5.11

does this effect the blockchain explorer?

No, if it sees 0.6.0+ nodes.

I'm talking about that critical bug. It still could end following another branch due to other changes.

[l8orre]

On the 11th of Feb we r launching public test of Asset Exchange. Do we have at least 1 client ready for that? What platforms does it support?

we wil see. nxtFreeRider is written in python3 using PyQt. It has a bunch of dependincies, that are all straightforward to obtain. should run without a hitch on ubuntu, debian, and all other linuxes. Windows - good chance - MAC no idea.

February 11th? good chance, but I won't bet my life on it. maybe late in the evening?  What will public test of Asset Exchnage mean? on the TESTNET or on the real nxt-Net?

[Come-from-Beyond]

What will public test of Asset Exchnage mean? on the TESTNET or on the real nxt-Net?

Testnet. I'll be giving testcoins to everyone.

[l8orre]

What will public test of Asset Exchnage mean? on the TESTNET or on the real nxt-Net?

Testnet. I'll be giving testcoins to everyone.

uff. testnet is good. again, good chance to have nxtFreeRider on the 11th. but no guarantees - don't feed me to the trolls if it gets a day or two later.
I am currently connecting the UseCase logic with the widgets.

[Anon136]

do you think its too early to make an [ANN] thread for my silver bullion gateway?

*edit* im pretty sure im going to make a career out of the nxt asset exchange

[l8orre]

do you think its too early to make an [ANN] thread for my silver bullion gateway?

totally NOT too early! Open it up, I'll join right away!

[wesleyh]

What will public test of Asset Exchnage mean? on the TESTNET or on the real nxt-Net?

Testnet. I'll be giving testcoins to everyone.

I should have something ready in the next week, but probably not monday.

[Voluntold]

do you think its too early to make an [ANN] thread for my silver bullion gateway?

*edit* im pretty sure im going to make a career out of the nxt asset exchange

Go for it! What would be the downside?

[ChuckOne]

Updates - 07/02/2014
- Shows multiple balances.
- Shows node status (Green = ON, Blue = OFF)

Now effective balance 136'722.00 NXT!!!

NXTCoin first automated forging platform!
Website: http://www.nxtio.org/

Is that really what we want? Centralization?

Not think it is as big concentration. My goal is to create different accounts as you get to an acceptable amount.

But I do think so.

Look at Ghash.io.

A single point of failure. If your server's are compromised, ...

I thank the pool operators for trying to provide a service for the community, but I think forging should remain individual.  Granted, Nxt is resistant to up to 90% concentration attacks, but I don't think this is a path we want to follow for multiple reasons.  Sooner or later, someone will open a pool and run off with everyone's Nxt.  I'm not saying the current ops will do this, but it's bound to happen.

You don't get any more using a pool, you just get more consistent payouts.

Those with very few nxt could forge something through my system. Also, consider that you can be forged without being individually 24hr online.

I think it has advantages and disadvantages.

Yet to be seen, if it is efficient. Is a long-term experiment.
And think that in less than a week running, seem going to to work very well.


If you do not use all your NXTcoin's and you never open your client, what purpose are your NXTcoin's? I think NXTio is the answer to this problem, so I decided to give a solution.

Sorry the bad English, I really speak Spanish.

I would like a better informing of the participants of your service. If you wish, I can help you with that.

[ChuckOne]

http://www.wired.co.uk/news/archive/2014-01/27/bitcloud
http://maidsafe.net/

Any new ideas here? Decentralized internet and cloud services based on the (Nxt) platform, coupled  with a currency and a Proof of Work (or Service) system, that gives the users an initiative to provide space and resources?

I live up the road from Kim Dot Com and he's very approachable. Perhaps he could play a role.

Kim is a lone wolf, but we could try?!

Why not? Let's give it a try.

[Jean-Luc]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Release 0.7.1

http://download.nxtcrypto.org/nxt-client-0.7.1.zip

sha256: 08f54b324ec4e644adc4864368e31c7ed14feb52918ca4522377c94d1f360f8a


Release 0.6.2

http://download.nxtcrypto.org/nxt-client-0.6.2.zip

sha256: cdb39d82e59aade4a0ea6b9f64fc9852fdab5d37a9a4ba755dffeaa96672aaf5


Change log:

Fixed a bug in the calculation of guaranteed balance which could in some
cases result in effective balance higher than the actual balance. Since
this change can produce a fork, a switch to the correct calculation will
happen at block 64000. Everyone should upgrade to either 0.7.1 or 0.6.2
before that block, or we will get forks.

Improved validation of peer addresses to prevent syntactically invalid or
unresolvable addresses from being included in the peers list.

Enabled logging of all debugging output to a log file. Everything printed
out to the console will also get logged to a file nxt.log. This should
help with submitting bug reports in case of crashes and errors, as it
doesn't matter anymore if your windows console just disappeared.
The nxt.log file is overwritten at every server restart.

Cleaned-up hallmark and authorization token processing. Added Token and
Hallmark classes, those can be now used by Java client developers to
generate and validate tokens and hallmarks without going through the http
interface.

Improved logging of block push failures and block pop-off events, those
will now print out the block id and the reason for block rejection.

Improved peer blacklisting and logging of reasons for blacklisting. Http
requests from blacklisted peers are now completely ignored.

Made all API request handling classes under the nxt.http package visible
in the javadoc documentation, to be used for documenting the parameters
and return values of the http API.

There haven't been any database related bugs in the 0.7 series. All the
above changes have been applied to both 0.6 and 0.7 branches. I encourage
more people to try the 0.7.1 version, there is no need to continue
maintaining the 0.6 branch very long if we don't encounter problems with
the database version.



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=LewA
-----END PGP SIGNATURE-----

[ChuckOne]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Release 0.7.1

http://download.nxtcrypto.org/nxt-client-0.7.1.zip

sha256: 08f54b324ec4e644adc4864368e31c7ed14feb52918ca4522377c94d1f360f8a


Release 0.6.2

http://download.nxtcrypto.org/nxt-client-0.6.2.zip

sha256: cdb39d82e59aade4a0ea6b9f64fc9852fdab5d37a9a4ba755dffeaa96672aaf5


Change log:

Fixed a bug in the calculation of guaranteed balance which could in some
cases result in effective balance higher than the actual balance. Since
this change can produce a fork, a switch to the correct calculation will
happen at block 64000. Everyone should upgrade to either 0.7.1 or 0.6.2
before that block, or we will get forks.

Improved validation of peer addresses to prevent syntactically invalid or
unresolvable addresses from being included in the peers list.

Enabled logging of all debugging output to a log file. Everything printed
out to the console will also get logged to a file nxt.log. This should
help with submitting bug reports in case of crashes and errors, as it
doesn't matter anymore if your windows console just disappeared.
The nxt.log file is overwritten at every server restart.

Cleaned-up hallmark and authorization token processing. Added Token and
Hallmark classes, those can be now used by Java client developers to
generate and validate tokens and hallmarks without going through the http
interface.

Improved logging of block push failures and block pop-off events, those
will now print out the block id and the reason for block rejection.

Improved peer blacklisting and logging of reasons for blacklisting. Http
requests from blacklisted peers are now completely ignored.

Made all API request handling classes under the nxt.http package visible
in the javadoc documentation, to be used for documenting the parameters
and return values of the http API.

There haven't been any database related bugs in the 0.7 series. All the
above changes have been applied to both 0.6 and 0.7 branches. I encourage
more people to try the 0.7.1 version, there is no need to continue
maintaining the 0.6 branch very long if we don't encounter problems with
the database version.



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQIcBAEBAgAGBQJS9p7eAAoJEFOhyXc7+e2A44gP/iocZBytS+u/B2mpbcEAs0e2
VIpx8FLrAmSOX8Dwq+8O8PHdDVvbHeZuVpi9PZNmrZQnOlUfhqHF8MdGIBhEzRJw
f+koWWjSZTft5w/CKnM4PpvD1FzFh2XO/jMtkgI8nEu6YAXg6jwM6X2BqS6tSCNh
A65F+Juaw/na6n1HNCOt6SKj3tCdQf0xwNOeYCvqbkJL589n9WmHrqmPXhNmT52N
NvypwvY1uuNCG4Bd+rq6auw0tdCfFkxT82dIO2AlFWDjPQblBVKdg9PhNMtUaIDd
9/Go0YqC73+rIsRiLFWdxZqnJXprSMGVN5uUaHZ/eKBsROl5smuFsGODNcWK/+3k
p+35wI/ZG+fh9Lf5ALkJ3r0ZJh9JRLJrsOCnseTVFd6qMtvoxo6bWt/3kQgvBKNA
GFB01022UbPgPB5JwAF+adYDXOQ2MthGCIsb9y//smfHvsEXNahs9qYdhVhe2iIa
lmjqrSh34BrU3SMEGm6tsyYBTJ5akvrrm5JTBR6ujqR5VO5bjyWNxYIgewipzwJi
bvi6m5s06ldCggR5Yk1pLriOXjZUAFqTGUPFS6DMpUMezys+IJeCZ/Lh7M6dcCem
9E0H/Q0PpuMiZ7T5SccjyHr9ICT3jj805ERXvlc/YI+R0UGg6KPKijv/bU1pbf+/
BnqIfsUWg5zbkU6lkuja
=LewA
-----END PGP SIGNATURE-----

Thanks.

[Fern]

http://www.wired.co.uk/news/archive/2014-01/27/bitcloud
http://maidsafe.net/

Any new ideas here? Decentralized internet and cloud services based on the (Nxt) platform, coupled  with a currency and a Proof of Work (or Service) system, that gives the users an initiative to provide space and resources?

I live up the road from Kim Dot Com and he's very approachable. Perhaps he could play a role.

Kim is a lone wolf, but we could try?!

Why not? Let's give it a try.

At the very least I could drop off a proposal that would make him aware of NXT, if he isn't already. It's a long shot but you never know. It might be best to wait until NXT is further down the track. I suspect he has his own currency plans but it would be great if he could help out with a New Zealand NXT hub and/or NZ based NXT/Fiat Exchange.

[ChuckOne]

http://www.wired.co.uk/news/archive/2014-01/27/bitcloud
http://maidsafe.net/

Any new ideas here? Decentralized internet and cloud services based on the (Nxt) platform, coupled  with a currency and a Proof of Work (or Service) system, that gives the users an initiative to provide space and resources?

I live up the road from Kim Dot Com and he's very approachable. Perhaps he could play a role.

Kim is a lone wolf, but we could try?!

Why not? Let's give it a try.

At the very least I could drop off a proposal that would make him aware of NXT, if he isn't already. It's a long shot but you never know. It might be best to wait until NXT is further down the track. I suspect he has his own currency plans but it would be great if he could help out with a New Zealand NXT hub and/or NZ based NXT/Fiat Exchange.

Yes. Making aware is always a good thing.