16. MAST, Taproot, Graftroot

MIT MAS.S62 Cryptocurrency Engineering and Design, Spring 2018
Instructor: Tadge Dryja
View the complete course: ocw.mit.edu/MAS-S62S18
KZbin Playlist: • MIT MAS.S62 Cryptocurr...
New types of scripts including MAST, taproot, and graftroot are covered.
License: Creative Commons BY-NC-SA
More information at ocw.mit.edu/terms
More courses at ocw.mit.edu

[@MrCoreyTexas]

What I can't understand is why public key hashes are not used in multisig, but they are in basic payments?

[@user-ct2ok6hm6b]

36:17 should be R=J+h(data,J)GG right?

[@willd4686]

Have MAST and graftroot both gone into bitcoin yet?

[@lucysluckyday]

Why PKH over PK? It is because it provides an extra layer of security over your funds. Hashing is non-reversible, so even QCs will need to brute force hashing if trying to steal funds, which makes it relatively QC safe even with uber scaling. But with PK, we know QCs will have an easier job reversing Elliptic Curve because of Shor's algorithm. As long as the address (and hence the PKH) has no spent UTXOs against it in the blockchain (i.e. no revealed PKs in any inputs) then Shor's algorithm is rendered useless against that address. That's the reason why it is recommended that you should always spend all/every UTXO against an address in a single transaction and then load the change into a brand new address (and never again use the earlier address).

[@JamesBlacklock]

He did respond to this: 1:08:42

[@hashimer5938]

I'm working in something very cool guys, thanks a lot, now, lets change all.

[@hi_vince]

usecase: put a zk-verifier on it

[@user-ct2ok6hm6b]

43:26 How are these MIT students making all these innovations but can't answer simple questions?

[@taopaille-paille4992]

The number 0 was only invented a few thousand years ago. I let you conclude by yourself.