Re: [bitcoindev] Against Allowing Quantum Recovery of Bitcoin

[Sjors Provoost <sjors@sprovoost.nl>]

[-- Attachment #1: Type: text/plain, Size: 1280 bytes --]



> Op 28 mei 2025, om 03:07 heeft waxwing/ AdamISZ <ekaggata@gmail.com> het volgende geschreven:
> 
> Hi all,
> 
> I'd like to point out that the worst case scenarios here might be even worse than one naturally thinks.

Good morning! :-)

> Two more observations:
> 
> (3) I do really like the "disabled NUMS" concept in regard to taproot external keys, for paving the way to PQC in tapleaf. This is one kind of censorship that cannot be controversial.

I brought this up [0], but it was later pointed out to me that it doesn't work.

The scriptPubKey that you see on chain is not the NUMS point itself. The internal key is a NUMS point, but it's tweaked. When this tweaked key is spent, the tweak itself is not revealed, so the blockchain can't tell if a NUMS was involved, and can't block the spend.

- Sjors

https://groups.google.com/g/bitcoindev/c/uUK6py0Yjq0/m/bQk2v0E5BQAJ

-- 
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/7E385C29-F84D-45E1-8314-D735929F9DC1%40sprovoost.nl.

[-- Attachment #2: Type: text/html, Size: 4112 bytes --]