Mimblewimble and Scriptless Scripts | Andrew Poelstra (Blockstream) | RWC 2018

[@Ryan-xq3kl]

Just a thought, I know this is years late but seems as if the issue is still unsolved. There is a contracting software for bitcoin like chains called simplicity being developed by blockstream where they created a contract that allows you to pay to its state. If grin can adopt simplicity we can have much more flexible dynamics between contracts that won't require auxiliary methods for creating schnorr signatures. Nevertheless the idea is fascinating and I think needs to be done. Effectively what I am suggesting is a version of simplicity for the grinblockchain which uses cross input signature aggregation to create contracts for which the state is verifiable to the end user but is not public information via the same assumptions that build up cross input signature aggregation. Every contract needs public information to work properly , I think having a contract state verification scheme on Grin could still be done in a privacy preserving way.

[@sovereignprime4683]

If you had an infinitely divisible token, you could encode transaction amounts with any kind of data you like. Confidential transactions means transaction amounts are hidden. This is an anonymous messaging system as well as a high compression distributed ledger. This is brilliant!

[@odedlei]

A mistake on slide at time 19:55 - A verifier should validate that: sG = R + eP (instead of sG = P + eR).

[@GabeHiggins]

This is a fantastic talk. I'm having to listen and relisten to slowly digest it, but fascinating system. I do wonder about Scriptless Scripts, why call them that? Wouldn't it be better to call them "Secret scripts" or "secret smart contracts" since there can still be a script defining the parameters of a tx, it's just unknown what those are to the rest of the network?

[@Metaroids]

Can you help me understand. I want to make a video that explains this in layman's terms so my subscribers will learn.

[@ericprice1936]

I think it’s called that because it’s more functional than Script is currently but still not Turing complete, there are no loops defined in the language. The privacy aspects described in this talk seems not to be referenced in the name scriptless scripts.

[@odedlei]

Thank you for the great interesting work, Andrew. Q: Even though you'd lose the possibility to be a "serving" full-node, wouldn't it make sense to have the storage comparison against a "pruned" full-node? If I understand correctly, pruning still allows you to be a fully validating (though selfish) node.

[@young-ceo]

This will be a game changer

[@masterbtcltc5490]

Litecoin is adding MimbleWimble

[@monkman369]

Epic Cash is the best implementation for Mimblewimble available.

[@kanzure]

transcript: diyhpl.us/wiki/transcripts/realworldcrypto/2018/mimblewimble-and-scriptless-scripts/

[@kobigurkan4546]

Although I appreciate all your work, I think it's dangerous to say the name out loud!

[@MoKo1981]

why?

[@rajthimmiah3859]

it's a Harry Potter reference

[@gdibiz1000]

Great video 👏👏 epic.tech recently released EPIC coin which is based on Mimblewimble. Very exciting potential as it has 21M max supply like bitcoin but trades at a little under 2 cents a coin. Exciting times ahead.

[@Castle3179]

Can one do loops with scriptless scripts? I wonder.

[@Ryan-xq3kl]

why do you need loops? its not a video game its money

[@mkay1388]

Ok so is this able to be applied to the past chain of btc, just future transactions or would have to be a completly new crypto?

[@binaryagetv]

Ideally it would be a sidechain to bitcoin.

[@hoisinholdup]

I think it's too different. I'm not sure if it will be a btc sidechain or a new chain, but the trustless sidechain concept seems to be dead tbh.

[@swfsql]

Perhaps Grin, which will implement MimbleWimble, will also have that

[@karlparadis6]

Is the presentation slides available somewhere? Thanks

[@ndlkdan6213]

Karl Paradis milan2016.scalingbitcoin.org/transcript/milan2016/mimblewimble You can take find it here..if some questions just let me know

[@andrewpoelstra9276]

The slides should be uploaded at rwc.iacr.org/2018/program.html by clicking on the title "Mimblewimble and Scriptless Scripts". Right now the link is broken, I'm not sure if this is a mistake or if the organizers just haven't uploaded them yet. Meanwhile I've uploaded them at download.wpsoftware.net/bitcoin/wizardry/mw-slides/2018-01-10-rwc/slides.pdf

[@karlparadis6]

Thank you! Btw, I think your work is awesome, super important and super interesting! :D

[@masterbtcltc5490]

Litecoin is adding MimbleWimble

[@yesterdaysguy]

Of what I understand this is really awesome but man am I kicking myself for not taking more math in school.

[@Ryan-xq3kl]

school wont teach you this type of math you need to become interested yourself

[@scuf1790]

Wow man.

[@dvsdvsdvs329]

Epic cash!

[@alviolampis]

My LTC's have mimblewimble.... 8)

[@spinLOL533]

Herro

[@masterbtcltc5490]

Litecoin is adding MimbleWimble