MODERATORS
5 stars based on
31 reviews
Thank you very much for that introduction. Alright, well polished machine right there. Let's try that again. Thank you for that introduction. My talk today is all about this. I'm not going to be talking about this.
If you see me reaching for the red hat, please stop me. Before I begin, I want to apologize in advance: I had to pick what Blockchain compression shirts thought was most interesting. Also I apologize to you, my audience, because this is going to feel like 23 lightning talks back-to-back in quick blockchain compression shirts. I am going to give you a vague taste of things, and you'll have to dig in later. Hopefully I can convey some of the exciement blockchain compression shirts I go.
I believe blockchain compression shirts everyone talking about cryptocurrencies should disclose their holdings. In my case, bitcoin. First we're going to go through a bitcoin keyword primer. This is basically not nenough bitcoin to do anything useful but it does mean you know a few keywords and you can sound like you blockchain compression shirts what you're talking about.
Then wen're going to talk about two kinds of proposed improvements. The first being consensus improvements, changes to the blockchain itself transactions and blocksin particular we're talking about backwards-compatible changes. And then non-consensus changes, such as changes in how peers on the network talk with each other, which does not involve changing the blockchain format.
Today, for a lack of time, I am not going to be talking about anything built on top of bitcoin, layer 2. I am not going to be talking about hard-forks incompatible changes to bitcoin. So here comes a very quick bitcoin keyword primer. This is a bitcoin transaction. It contains outputs TXOs. Each output has an amount and a script scriptPubKey. That output script is a very simple stack-based scripting language with no loops that validates blockchain compression shirts can spend this output. Here's another transaction spending it.
You can see that this transaction has an input, and the input has an input script scriptSig spending the previous output. In this case, it's a key and the signature of that key. When you evaluate that, and then the output script, it leaves "true" on the stack, meaning it's valid, and therefore that the transaction is valid and authorized. The other term that we come across is "txid" which is the hash of the entire transaction.
Transactions are built blockchain compression shirts into chains like this. Of the 19 outputs blockchain compression shirts this diagram, 6 of them are unspent.
They are blockchain compression shirts members of the unspent transaction output set UTXO set. And that's important because to validate a new transaction, the transaction must spend a member of the UTXO set.
That's blockchain compression shirts set of things that you need to check against, to spend a new blockchain compression shirts. Bitcoin uses a blockchain. A bitcoin block contains the hash of the previous block, causing it to be a chain. And it blockchain compression shirts has a set of transactions in the block. Now the way that transactions are put into the bitcoin block is kind of interesting. The txid is a hash of the transaction itself.
We take pairs of txids, hash those together, and we build up a tree. We put the blockchain compression shirts of the tree in the bitcoin block header. That kind of hash tree blockchain compression shirts called a merkle tree.
The cool thing about a merkle tree is that I can prove to you that this transaction is in the merkle tree. If you have the block blockchain compression shirts then I can prove that the transaction is in the block.
But because all I have to give you is the txid and the hash of the other neighbor at that level of the tree, you can combine the hashes yourself, and check that it matches the merkle root. If it does, then you know that the transaction is in the block.
Let's talk about a first set of improvements that blockchain compression shirts been proposed and researched. These are called soft-forks. A soft-fork is the backwards compatible changes. Old nodes still work.
You can make things that are currently legal to be illegal, but you can't make things that are currently illegal to be legal because that would break compatibility.
As a warm-up, I am going to talk about an upgrade that was activated in August called segregated witness segwit. And this addressed the problem of script upgradeability, UTXO bloat, and unwanted malleability. What really is segwit? Well, it's a new output script witness type. And it's literally just a version and then a hash. For version 0, it's either a 20 byte hash hash of a public keyor a 32 byte hash hash of a script.
The "input" which normally spends this is empty. The real input data goes into something called the witness. And the witness contains the input stack and the key or script which we promised in the output.
You can check whether it's the right one by hashing to check whether the hashes match up. Here's an old style transaction, remember the txid was the hash of the whole thing. If it was a segwit transaction, the input script would be empty and this new witness thing would contain the pubkey and the signature for example. Blockchain compression shirts, as you've noticed, that is no longer hashed into the txid, it has been segregated out of the txid.
This turns out to be really important because there's a long list of different input scrips that can satisfy those output conditions. Blockchain compression shirts can sign it again, there's a way for third parties to change signatures and make them still work but they completely change the txid, this is called transaction malleability. And malleate is an obsolete word, it means to hit something with a hammer, so I imagine someone out blockchain compression shirts whacking transactions with blockchain compression shirts hammer to change their transaction txid.
Segwit helps several blockchain compression shirts. We see that version byte helps with-- everything else above version 0, like version 1, is given a free pass at the moment. It helps layer 2, because if you're building things on top of bitcoin, you can now rely on the fact that txid values don't change. Someone can't change the chain of transactions by malleating one of the earlier transactions in your pending transaction tree.
It also helps hardware wallets because of a checksig change. But importantly, it helps bloat incentives and throughput. Without segwit, it's actually cheaper to create a new output than it is to spend an existing one. This creates incentives to create more UTXOs, which everyone has to remember. With this witness, it's outside the old rules-- it's a separate thing.
These bytes are not blockchain compression shirts in the same way. The bitcoin rules say that you cannot have more than a million bytes in a block. The witnesses, which blockchain compression shirts not apply under that rule, to count a quarter of a byte each. This means that you can fit more into a block, and in particular what it blockchain compression shirts is that it's now almost as cheap to spend an output as it is to create a new one blockchain compression shirts the incentives are more aligned.
That's in the past, now. The first of the proposals of the things that I want to talk about for the future is this new problem, in segwit, we have this new output format but we have no address format. The original bitcoin addresses are base58, a nice round number, with a bit sha checksum. It's just an example address on screen, don't send money there. The new addresses are base32 with a bit BCH checksum code. Anyway, the code is guaranteed to detect up to 4 errors.
And blockchain compression shirts "similar" letter substitutions it detects up to 5 errors. And if you have other errors, it has a 1 in a billion chance of falsely okaying the blockchain compression shirts. This is a much stronger checksum than the old bit checksum that we were using. With bech32, readability blockchain compression shirts improved, bech32 is case-insensitive, it fits better on QR codes, and it has error correction and error detection. We're seeing this being rolled out now.
I think we're going to see this coming out very soon. This solves the problem of really large scripts. MAST stands for merkleized abstract syntax trees. When bitcoiners talk about this, what they are really talking about is urning a script into a merkle tree of scripts. So then in order to spend it, you provide one of those scripts, and one of hte hash proofs and blockchain compression shirts neighbors to prove that it's in the tree.
Before, we might have had a complex script like this where I can spend it after blocks or you can spend it with your key.