From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 03 Jun 2025 14:40:40 -0700 Received: from mail-qk1-f191.google.com ([209.85.222.191]) by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1uMZN9-0001m1-F2 for bitcoindev@gnusha.org; Tue, 03 Jun 2025 14:40:40 -0700 Received: by mail-qk1-f191.google.com with SMTP id af79cd13be357-7caee988153sf1029491085a.1 for ; Tue, 03 Jun 2025 14:40:39 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1748986833; cv=pass; d=google.com; s=arc-20240605; b=Dgy7XYfHizEkAfGxLNIuSVmBn3ztQzldmmq8vsqL2rGgo2Wj6ROZLHDC1CuXYEyg1V WlAtQFJLxW2g72GEHVky62qmmi1YC26CNS//yTVduUh1Ytrnq+ARMWIkBwlvW5MhbTIC 1XFk+euAe21nuAhxyO9dqCoe+mKHtxkn4TIi6pAgv3aMHmMFAKNrnHB+wSjZiLZzoOuE ld74wCDO17Jgg0Pt2fgXfUQwMJwtqTdPCVmJGSS0BWrWxINhHMkcBX+QobW+4Afp25Tt Hs91VCekmivQZwiVMyvIVKJfCr9eCeF9MM8YoBOv2WOYcyp8rIop2eXIxbxqwy9SaqfH fzWQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:content-transfer-encoding:cc:to :subject:message-id:date:from:in-reply-to:references:mime-version :sender:dkim-signature:dkim-signature; bh=RPiv2MQzSrwuy+kg7D7jvDBjM724YgcfP6HZA7/zL0c=; fh=ZRbbTAYtSuGqF+/ByYyoY84BJPy35XjBv5Vx0Nq3nxE=; b=EGBoQhnBsi0tWUwE52HlwJN9DnV6wTt6kxRuqBdc2ajoIcP4DJdHOcc5zYJbiBD6Nw Bh7hXOY/RUUv2JAQOXj33B/wTMZ/h2s2SQOO0QNtkZ/5hIffYKpYOvL62iDqYGkxH2/n Jp2oNfEZZ6tcZ1W8Hyo0Qv5j5BJEhQX5ICDoeU0xwII4SJLWfrV+FvaCpxoUPSyZu6Kp ELWcgu2nRNdMRW67hE+2j96SCFJ0wV5nOJgdY+tAVzY7yiOoJill4lKSaOUhqcvDuRcQ SCRvy1XeJJmwTGMKe2sd5QH2B81ye03JRW6M9L7xvhS/wie4ZKT70mVIOs/WMiHZmmFn W9yw==; darn=gnusha.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=aU7o1JhD; spf=pass (google.com: domain of bnagaev@gmail.com designates 2607:f8b0:4864:20::62d as permitted sender) smtp.mailfrom=bnagaev@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=pass header.i=@googlegroups.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1748986833; x=1749591633; darn=gnusha.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:content-transfer-encoding:cc:to:subject :message-id:date:from:in-reply-to:references:mime-version:sender :from:to:cc:subject:date:message-id:reply-to; bh=RPiv2MQzSrwuy+kg7D7jvDBjM724YgcfP6HZA7/zL0c=; b=UF/i1CYUFcq1w1/DXooKjE+BBxG7j3D5SEl4OAU4Hx2gFOwKeOk+QcBWlr5dEiqujL cJqdDLu3X34FK/I3OF+QI+dTeF+JqRgK294D/dwaadbTz5qLPlHP6anLHujiaVzgf0n+ 7beWqmXmN3jr2DXV2ewAsDpmqvqonwYODRwmHqnhqmy0aWIuFRL/YTymBiuPXTdfnw1f gVrBMhTASFK5uEgl1jkS5uQEezzDf0JOxO026H+vpvxL9rOasGQgYvk3OXv64vQKqx/q iIyiSp/L0OVBIl8pqcB+pcNE9HJlwvR4gNSNSLpoQZ0dNLS8Toiu8LMCQTnXSLUhtkwf vGUw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1748986833; x=1749591633; darn=gnusha.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:content-transfer-encoding:cc:to:subject :message-id:date:from:in-reply-to:references:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=RPiv2MQzSrwuy+kg7D7jvDBjM724YgcfP6HZA7/zL0c=; b=QHK5YRfVDvm1mdnqzfEwSBmkEBTWs3VeNvsYONNhPUWlhrFUxyLvG+//wHo0+80v4A Ea4F1lzEa5j1mNNr9mRgmMhNlnQkk+I/GJk+Pvmb8yBZyU4keskuZ2aUbxjRbPgp1/5L l2v9seP06s8Rz1vg/nnLpntTi64Oe+/dJbUiwEMgMOJiikIkyLQ+Y7PmajdAHKsOZAgQ PWbShs0sFu2346ReRR9k4uO0RTuYq1NKLAv18guMzsX8eyuTFnPrNCPDyOxsZgfy3NuP QxZRFukGgGHZ7/vOHsI4Y0Q/CqfO3GScZpPVNc/J5n1x7MsMmqfLqejV172t108advuM mlWg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1748986833; x=1749591633; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:content-transfer-encoding:cc:to:subject :message-id:date:from:in-reply-to:references:mime-version :x-beenthere:x-gm-message-state:sender:from:to:cc:subject:date :message-id:reply-to; bh=RPiv2MQzSrwuy+kg7D7jvDBjM724YgcfP6HZA7/zL0c=; b=qdl6bdND3bBZg3J2XHK6MhqZbSVXkZF/FRVCWavVvckAuIG5KboNI/1meSYO8lbfTt N0e3KraE1Nt7KpcZCpbBAK5wqDBIs0OjLClnaiteHRjLHVDjEGSmcS8EL5be4C6yanra wOXY2DLjJab+oEkrX7TO683n19hzOPD7zk4ohhCeTfgq6IKCrSF7M8GJBYreOjn1ISc3 wLYw7CuUVtigv7MJkB6cLwLi6KxHL1IEcxJ2G7kj9hYZ+2bgm9eR8W5IVBaKr1RAwOPy KLLwJIe/5lEb2FCYGVEN8JaavyKcC0/CpMFVHiZvYBHOkGnAI4BuVxnHsDffRPR55YB/ Zfuw== Sender: bitcoindev@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCVd417DgSgQ1WUztUeA57KwPIkTOmYhXN0mxGc/9sA+MJag3i3HZ67cHppKTvXUeOBnQhtHXHHKvTId@gnusha.org X-Gm-Message-State: AOJu0Yx/FWhsYZqeXjiZcvbtdjePFECWocyTMBF67aQIlxMQ37+S45SX MAbEVBKC+3Gjn9Yyp8OB15MHSNaiL+fxM/y00xd4Upv+x5FEMwMspkC4 X-Google-Smtp-Source: AGHT+IEF0k/jtxAUak7DzLQCPZSzxh4pj0lg5hXlO596M8CKjH09aLOMGTPAQKcSYBImq3KuRjloOQ== X-Received: by 2002:a05:620a:294b:b0:7c5:3c0a:ab7e with SMTP id af79cd13be357-7d21a66eb24mr8260085a.5.1748986833152; Tue, 03 Jun 2025 14:40:33 -0700 (PDT) X-BeenThere: bitcoindev@googlegroups.com; h=AZMbMZdq58HxjeFiDZ1zEFUh1WFKOWIgGwp32jxG2+Ebh3DD2g== Received: by 2002:a0c:d785:0:b0:6fa:bd14:59a0 with SMTP id 6a1803df08f44-6fac5cfa853ls89389446d6.0.-pod-prod-01-us; Tue, 03 Jun 2025 14:40:28 -0700 (PDT) X-Received: by 2002:a05:6214:cc9:b0:6f8:a667:2957 with SMTP id 6a1803df08f44-6faf73566c8mr5140156d6.10.1748986828873; Tue, 03 Jun 2025 14:40:28 -0700 (PDT) Received: by 2002:a05:620a:27cc:b0:7c5:3b15:3956 with SMTP id af79cd13be357-7d210d61645ms85a; Tue, 3 Jun 2025 14:27:25 -0700 (PDT) X-Received: by 2002:a05:622a:4c8a:b0:4a4:30cf:c213 with SMTP id d75a77b69052e-4a5a68f8f4cmr220831cf.48.1748986044448; Tue, 03 Jun 2025 14:27:24 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1748986044; cv=none; d=google.com; s=arc-20240605; b=N3c9rVmk3k2H8VsMvCTJXAHW9IV2+Ie+b+hQYEp6VbtRh8+/ckRMW3bayAqRJczJIH 694GmCsN6EtlX9EEnbwhBqwHs75n/sMOfrl7Pb7LyUMCgKjphlWcGseN5Nhp28iJ0KE/ G4QBe4usymoGGCu095V9fhJW/7+rnqq4Fm5+NGDKteQoPLEUrhN5Ck85fW8Qw7q8dMbn Ktj9UqTQI+Fku0xm/W4xT1FdgPOSKmKup0FVo4lWiO3AyIOahbKuE/UjtU+/4U+ONDCw qQCJnlsBHG6datyH3b6Q7GgjgI9CTKCZGNHRnLWdrGo8/5G7iYRXMBc2HCmHRHOiJaJz 8mQA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=ulTw/lVZEN2PWnioqptb9IAcoocVd9g51ZoGHuYUQOU=; fh=FaZol9Uk6gnK+uGtcSFJW2nlQY6QrNwlPUIRM6Aafbo=; b=Z0dy90w7wRy7Bq4JFawu0/LJ2h2dx1woVOV/zf1bvpsUwbX0EsoRC0PGUzgTNE5TcT nhcpinDUZ04ZS9IBfuj9HbEIQ75gVwJ6QxacayZXDehOz/kPCfrQYmUwCeSm9pHhgEtP dU1T9+esGdYrfL/G8Pmy3AmTdST2mvwpqzyBp1vEGQVw32wSvRMESY32sClB8zx9RG+Q 7A9cowAXX8fHdFi+EDRZzzFqVWyqZi+VdvwSB+oAjv32rDXw8m9fcSkndb67md6YSiWN wIYcxnoEQqaMogAVNkMgsNzofkQTzIJgAYJV8IK4r9X7W3sEOJp7dqTd+2t6hmhDmGuG /Fjg==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=aU7o1JhD; spf=pass (google.com: domain of bnagaev@gmail.com designates 2607:f8b0:4864:20::62d as permitted sender) smtp.mailfrom=bnagaev@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=pass header.i=@googlegroups.com Received: from mail-pl1-x62d.google.com (mail-pl1-x62d.google.com. [2607:f8b0:4864:20::62d]) by gmr-mx.google.com with ESMTPS id d75a77b69052e-4a435745236si4994991cf.1.2025.06.03.14.27.24 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 03 Jun 2025 14:27:24 -0700 (PDT) Received-SPF: pass (google.com: domain of bnagaev@gmail.com designates 2607:f8b0:4864:20::62d as permitted sender) client-ip=2607:f8b0:4864:20::62d; Received: by mail-pl1-x62d.google.com with SMTP id d9443c01a7336-23035b3edf1so55797615ad.3 for ; Tue, 03 Jun 2025 14:27:24 -0700 (PDT) X-Gm-Gg: ASbGncvA/sCbmfmOlEErz2tSLyqmqBQD4QzSUT2X2AWjCvfujyFHK6zumDU/VwZYdhU AIKH6pKBApH+O9cnz2SdGWsWw31B4JRa/Si2mFou4MX+kAQXzNe4VjZPVle18Q3sGZg5u7aRM/M FqresZ856SJB2hgkcCATis/iMSUDDxoGg= X-Received: by 2002:a17:902:d550:b0:224:1af1:87f4 with SMTP id d9443c01a7336-235e14bc5d2mr3467875ad.22.1748986043681; Tue, 03 Jun 2025 14:27:23 -0700 (PDT) MIME-Version: 1.0 References: <08dbeffd-64ec-4ade-b297-6d2cbeb5401c@achow101.com> In-Reply-To: <08dbeffd-64ec-4ade-b297-6d2cbeb5401c@achow101.com> From: Nagaev Boris Date: Tue, 3 Jun 2025 18:26:47 -0300 X-Gm-Features: AX0GCFt0w5A2qY8cTdMGvti6FQ1s92uQTPnTlrtzSslZI9EdtPVzYOIssa3sy-A Message-ID: Subject: Re: [bitcoindev] Allowing Duplicate Keys in BIP 390 musig() Expressions To: Ava Chow Cc: bitcoindev@googlegroups.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Original-Sender: bnagaev@gmail.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=aU7o1JhD; spf=pass (google.com: domain of bnagaev@gmail.com designates 2607:f8b0:4864:20::62d as permitted sender) smtp.mailfrom=bnagaev@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=pass header.i=@googlegroups.com Precedence: list Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com List-ID: X-Google-Group-Id: 786775582512 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Score: -0.5 (/) Hi Ava, Is it safe to allow multiple participants to have the same public key? If deterministic nonce generation is used (deriving each participant's nonce from the message, the set of public keys, and the participant's private key), duplicate public keys would lead to identical nonces. While this may not be catastrophic (since they are signing the same message and the private key likely can't be extracted) it still seems risky. Identical nonces can have unexpected consequences, and I'm not sure if all security assumptions would still hold. Curious what you think. Best, Boris On Tue, Jun 3, 2025 at 6:08=E2=80=AFPM 'Ava Chow' via Bitcoin Development Mailing List wrote: > > Hi All, > > In implementing musig() descriptor expressions, I realized that the > restriction "Repeated participant public keys are not allowed" is a bit > complicated to implement. While I don't see why anyone would want to > duplicate keys, MuSig2 does allow duplicate participant keys and > allowing them would make the implementation of musig() expressions much > easier. Thus I'd like to propose changing the BIP to remove this > restriction. > > Has anyone implemented musig() expressions yet with this restriction, > and would removing it be a significant breaking change to anyone? If > not, I'll make the change to the BIP in a few days. > > Thanks, > > Ava > > > -- > You received this message because you are subscribed to the Google Groups= "Bitcoin Development Mailing List" group. > To unsubscribe from this group and stop receiving emails from it, send an= email to bitcoindev+unsubscribe@googlegroups.com. > To view this discussion visit https://groups.google.com/d/msgid/bitcoinde= v/08dbeffd-64ec-4ade-b297-6d2cbeb5401c%40achow101.com. --=20 Best regards, Boris Nagaev --=20 You received this message because you are subscribed to the Google Groups "= Bitcoin Development Mailing List" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to bitcoindev+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/= CAFC_Vt5z%2BB%2BF%3DQOytZ96ptRFweX1aGBV-CXHqwv54UAyo_iiAw%40mail.gmail.com.