Twitxy Saved

Mike Schmidt

Verified account This account is verified. Learn more

@bitschmidty

Funding Bitcoin node security, testing, and maintenance @bitcoinbrink
Blocking and tackling at @bitcoinoptech
Joined September 2018
908 Following 6.4K Followers 2.8K Posts

Latest posts 5

Mike Schmidt Verified account @bitschmidty
BIP54 updates from the last several months of Consensus Cleanup work

Implementation progress:
Bitcoin Core: github.com/bitcoin/bitcoi… (open) implements BIP54's rules without mainnet activation. Needs reviewers.
libbitcoin: github.com/libbitcoin/lib… (merged)
rbitcoin: github.com/reardencode/rb… (draft, signet)
btcd: github.com/btcsuite/btcd/… (draft)
Research: Pieter Wuille published a proof, machine-checked in Lean, that BIP54's two timestamp rules together bound chain length for a given amount of work. delvingbitcoin.org/t/bounds-on-ch…

64-byte txs: Jeremy Rubin argued they may have legitimate uses (groups.google.com/g/bitcoindev/c…) and wrote up an alternative that invalidates merkle internal nodes instead (groups.google.com/g/bitcoindev/c…). BIP54's rationale now acknowledges that option but still prefers the simple ban.

BIP54 tracker for forward-compatibility for miner coinbase locktimes: mainnet.observer/charts/transac…

Other discussions:
Antoine Riard's response to Mark Friedenbach's objection that fixing timewarp forecloses forward blocks groups.google.com/g/bitcoindev/c…

An idea to split BIP54 into one BIP per fix, which the authors declined github.com/bitcoin/bips/p…

Testnet5 (BIP95): enforces BIP54 from block 1 groups.google.com/g/bitcoindev/c…

bip54.org is updated to reflect these.
github.com Implement BIP 54 (Consensus Cleanup) without mainnet activation by darosior · Pull Request #35793 ·... This implements the Consensus Cleanup validation rules proposed in BIP 54. These rules are only enabled on regtest. Mainnet activation, if any, is to be considered separately. This patchset is base...
6 replies 18 reposts 49 likes 4.6K views View on X
Mike Schmidt Verified account @bitschmidty
Optech goes Brady Bunch mode
Bitcoin Optech Verified account @bitcoinoptech 5d
Elias Rohrer (@_tnull), Greg Sanders (@theinstagibbs), Antoine Poinsot (@darosior), Oleksandr Kurbatov (@olkurbatov), and Nishant Bansal (@nishant282003) joined Optech to discuss Newsletter #429:

News
● Silent payments for multiparty wallets (41:18)
● CLN self-referential channel announcement DoS disclosure (52:57)
● Bitcoin Core security policy update (24:53)

Selected Q&A from Bitcoin Stack Exchange
● Why does Bitcoin use both a transaction ID and a witness transaction ID? (1:02:58)
● How to sign a MuSig with Bitcoin Core (1:07:54)
● What changed in Bitcoin P2P protocol version 70017 compared to 70016? (1:09:11)

Releases and release candidates
● Bitcoin Core 32.1 (35:56)
● Bitcoin Core 31.2 (39:18)
● Bitcoin Core 30.4 (40:42)
● Bitcoin Core 29.5 (40:53)
● Eclair 0.14.6 (1:12:37)
● LND v0.21.5-beta (1:13:36)

Notable code and documentation changes
● Bitcoin Core #36665 (3:43)
● Bitcoin Core #36667 (14:37)
● Bitcoin Core #36669 (19:02)
● BIPs #2130 (1:15:55)
● Core Lightning #9627 (1:17:33)
● Eclair #3417 (1:19:13)
● Eclair #3416 (1:26:02)
● LDK #5314 (1:28:48)
● LDK #5412 (1:31:27)
● LND #11164 (1:33:28)
● LND #11373 (1:36:17)
● BTCPay Server #7744 (1:38:59)
View quoted post on X
1 replies 2 reposts 20 likes 891 views View on X
Mike Schmidt Verified account @bitschmidty
Bitcoin Core v32.1 shipped this week. Over 200 of the changes in the release were testing related (185 PRs “Tests”, 47 “Fuzzing”).

Test related PRs are the most common type of PR in Bitcoin Core. What “testing” covers in and around Core:

- Manual testing where reviewers build and run PRs and think hard while trying to break things
- Unit tests
- Functional tests. Python scripts that drive actual bitcoind nodes.
- Fuzz tests that run around the clock by Fuzzor (Brink’s infra) and by Google’s OSS-Fuzz.
- Sanitizers
- Differential fuzzing. Bitcoinfuzz feeds the same inputs to Core and other implementations and flags anomalies.
- Full system fuzzing. Fuzzamoto fuzzes production binaries over P2P and RPC with no changes to Core.
- Mutation testing. bcore-mutation breaks the code on purpose to check whether the tests notice.
- Network simulation. Warnet can run hundreds of nodes to test how changes behave across a whole network.
- And in the last year, LLM assisted review and security scans.

Additionally, full network simulation using Antithesis that tests multiple nodes interacting under randomized, reproducible conditions.

Bitcoin Core has accumulated over a century of CPU time fuzzing individual functions and critical components.

This all helps Bitcoin Core’s software quality assurance, but it doesn’t just benefit Core. @dergoegge + @macrohead7's fuzzing infra found a chain split bug in btcd. Fuzzamoto has since found three more btcd bugs, and @rbitcoin_org's release notes credit Niklas for findings there.

@brunoerg’s Bitcoinfuzz has reported bugs in libbitcoin, rust-bitcoin, rust-miniscript, LND, Core Lightning, Eclair, LDK and others.

Tests are a lot of the work and also what goes unnoticed when it goes right.

Shoutout to the testers 🧡
9 replies 19 reposts 74 likes 2.5K views View on X
Mike Schmidt Verified account @bitschmidty
Bitcoin Security Consortium (@BTCconsortium) member Coinbase helped organize a Post-Quantum Bitcoin Workshop that took place on August 28.

The event took place at Stanford University and was co-organized by Dan Boneh (@danboneh), a professor in applied cryptography, and Localhost Research (@lclhostresearch) a Bitcoin-focused research center.

Attendees included Bitcoin developers, cryptographers, researchers, institutional custodians, and hardware-wallet representatives.

Coinbase provided a summary writeup on their blog:
coinbase.com/blog/moving-bi…

Localhost recently posted theirs as well:
lclhost.org/blog/quantum-w…

The agenda for the event:
gist.github.com/lclhostresearc…

Detailed session notes (by JD from Localhost, thank you!) are on the @btctranscripts website:
btctranscripts.com/quantum-worksh…

More:
x.com/lclhostresearc…
www.coinbase.com Moving Bitcoin’s Post-Quantum Readiness Forward Coinbase is a secure online platform for buying, selling, transferring, and storing cryptocurrency.
localhost research Verified account @lclhostresearch Oct 29
Two months ago, alongside @Coinbase and @danboneh, we co-hosted a post-quantum workshop for cryptographers, protocol engineers, hardware wallet manufacturers, and institutional voices working on Bitcoin’s preparedness for a CRQC.

Today, we’re sharing transcripts from the event and a blog post summarizing the discussions: lclhost.org/blog/quantum-w…

A special thank you to our speakers and session leaders: @danboneh, @asanso, @LindellYehuda, Pieter Wuille, @conduition_io, @n1ckler, @P3b7_, and Justin of Localhost, everyone who traveled to attend, and the @MARAFoundation_ for sponsoring our post-event dinner.

We hope this workshop leads to more in-person opportunities to study Bitcoin’s Post-Quantum Problem (PQP).

Finally, thank you to @btctranscripts for hosting the transcripts of every talk and session: btctranscripts.com/quantum-worksh…
View quoted post on X