Damus
waxwing · 5w
Did you know that Dryja's discreet log contracts are fundamentally unsound? OK now the click has been well and truly baited, I'll try to contextualize: DLCs are unsound in a theoretical sense that I'...
Zero-Knowledge Goof profile picture
Yes I knew this! https://github.com/LLFourn/dlc-sec/blob/master/main.pdf

It seems I found Dryja’s scheme is actually sound if you come up with a reasonable definition of oracle security which matches your claim.

I later found though there’s a bunch issues if you try and combine events from the some oracle (treat the some of anticipated signatures as a conjunction of the two outcomes).
1❤️1🤙1
Zero-Knowledge Goof · 3w
(But to be clear you cannot use the oracles key as a signing key for schnorr — it obviously doesn’t compose)