Bitcointalk Mobile Browser presented by IRLBTC™

<< >> (p.2)

Author

Topic: How do I know who paid me? (Read 5458 times)

Gavin Andresen

Legendary

Offline

Activity: 1652
Merit: 2401

Chief Scientist

Re: How do I know who paid me?

March 17, 2011, 12:46:48 AM

#21

Quote from: ByteCoin on March 17, 2011, 12:23:44 AM

You CAN encode a message in a currently accepted transaction using the broadband subliminal channel inherent to DSA (and ECDSA).

Googling for 'ECDSA broadband subliminal channel' to figure out what the heck you're talking about...

... doesn't that require that the recipient (as well as the sender) know the private key?
(you encode the message in the 'k' param, which the recipient can only recover using the private key?)

How often do you get the chance to work on a potentially world-changing project?

Gavin Andresen

Legendary

Offline

Activity: 1652
Merit: 2401

Chief Scientist

Re: How do I know who paid me?

March 17, 2011, 12:53:37 AM

#22

Thanks for the link to the wikipedia page in the other thread... so receiver CAN recover 'k' given the public key and signature.

Cool!

That doesn't solve the problem I'd like to solve (because you still need to generate a new keypair for every transaction), but it is cool.

How often do you get the chance to work on a potentially world-changing project?

ByteCoin

Sr. Member

Offline

Activity: 416
Merit: 277

Re: How do I know who paid me?

March 17, 2011, 10:54:29 AM

#23

Quote from: gavinandresen on March 17, 2011, 12:53:37 AM

Thanks for the link to the wikipedia page in the other thread... so receiver CAN recover 'k' given the public key and signature.

Thanks for bearing this useful fact in mind.

Another thing to consider, once any coins associated with an address have ever been spent then the public keys associated with that address are public by virtue of the signature in the transaction. If the merchant's public key is available in this fashion then the customer and merchant can generate a shared secret using Diffie-Hellman key agreement or some similar scheme. This shared secret could be used as the "authentication key" mentioned in the wikipedia article.

Of course, if you're thinking of now enabling currently forbidden scripting features then a lot of options become available.

ByteCoin

Pages: « 1 [2] All

Page 1

Viewing Page: 2