[bitcoindev] [BIP] P2WOTS: 64 Slot Winternitz UTXO's (witness version three)

["'opus lux' via Bitcoin Development Mailing List" <bitcoindev@googlegroups.com>]

[-- Attachment #1: Type: text/plain, Size: 1130 bytes --]

Hi all,

I's like to officially propose P2WOTS (Pay-to-Winternitz-One-Time-Signature), a new native Bitcoin output type using witness version three. It provides post quantum security using only SHA-256 and contains no elliptic curve key material anywhere.

The 34 byte scriptPubKey commits to a Merkle Key Tree over 64 independent WOTS+ one time key pairs.
This construction directly solves the WOTS+ one time signing limitation, each spend consumes a fresh independent slot key, making address reuse safe without ever violating the one time property.

BIP draft PR:
https://github.com/bitcoin/bips/pull/2194

Looking forward to technical feedback from the community.

Regards,Opus Lux

-- 
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/LB_O7FqGG5kTYN96-MClXIl7retn-UyDlPQbVhVOnxlMO5i-h1Oq1NDhAkaZUqx--yeNW38X8p90IulPeSDLJzhJd5UwHYvFEzc8YhVWvtU%3D%40proton.me.

[-- Attachment #2: Type: text/html, Size: 1834 bytes --]