Gave a presentation last week on "purecoin", showing basically how ~ 50% embedding rate in "pure" bitcoin transactions with no scripts is inevitable *even if* you force the outputs to prove they are not "fake". 'Fraid the audience had no idea what I was talking about, so I'll post the pdf here:
https://files.catbox.moe/tpfc4x.pdf
I must apologize for calling it a "very hard fork" because you could actually do it as a soft fork (thanks giacomozucco (nprofile…u090) ) but it's hardly relevant. The point is that there is no version of Bitcoin, even a 99% crippled version of it that doesn't allow L2s, that does not allow data embedding, *except* one in which we completely change the cryptography to BLS (any deterministic signature scheme could in theory do it, but nobody is going to seriously suggest hash-based signatures or RSA FDH I think) (thanks llfourn (nprofile…xj85) for thoughts on this), *and* totally cripple any programmability. And since quantum is coming (so they tell me!) I see basically no chance of this happening.
#bitcoin #cryptography
waxwing
npub1va…knuu7
2025-11-19 14:37:05 UTC
Author Public Key
npub1vadcfln4ugt2h9ruwsuwu5vu5am4xaka7pw6m7axy79aqyhp6u5q9knuu7Seen on
wss://nostr.oxtr.devPublished at
2025-11-19 14:37:05 UTCEvent JSON
{
"id": "4b21425fd0c534f56e659bf8b9e2e038d6a594b08781dc5c9a6ee0355199e55b",
"pubkey": "675b84fe75e216ab947c7438ee519ca7775376ddf05dadfba6278bd012e1d728",
"created_at": 1763563025,
"kind": 1,
"tags": [
[
"alt",
"A short note: Gave a presentation last week on \"purecoin\", showi..."
],
[
"p",
"ef151c7a380f40a75d7d1493ac347b6777a9d9b5fa0aa3cddb47fc78fab69a8b",
"wss://adult.18plus.social/"
],
[
"p",
"35ce5f39979962b6f5e2740b5db498f67a8c1c1b7f8a7c7c3e354e2bead27744",
"wss://nostr.mom/"
],
[
"p",
"ef151c7a380f40a75d7d1493ac347b6777a9d9b5fa0aa3cddb47fc78fab69a8b",
"wss://adult.18plus.social/"
],
[
"p",
"35ce5f39979962b6f5e2740b5db498f67a8c1c1b7f8a7c7c3e354e2bead27744",
"wss://nostr.mom/"
],
[
"t",
"bitcoin"
],
[
"t",
"cryptography"
],
[
"r",
"https://files.catbox.moe/tpfc4x.pdf"
]
],
"content": "Gave a presentation last week on \"purecoin\", showing basically how ~ 50% embedding rate in \"pure\" bitcoin transactions with no scripts is inevitable *even if* you force the outputs to prove they are not \"fake\". 'Fraid the audience had no idea what I was talking about, so I'll post the pdf here:\n\nhttps://files.catbox.moe/tpfc4x.pdf\n\nI must apologize for calling it a \"very hard fork\" because you could actually do it as a soft fork (thanks nostr:nprofile1qqsw79gu0guq7s98t473fyavx3akwaafmx6l5z4rehd50lrcl2mf4zcprfmhxue69uhkzer4d36zuvfcwpk82uewwdhkx6tpdshsz9mhwden5te0v96xcctn9ehx7um5wghxcctwvshsz9thwden5te0wfjkccte9ejxzmt4wvhxjme094u090 ) but it's hardly relevant. The point is that there is no version of Bitcoin, even a 99% crippled version of it that doesn't allow L2s, that does not allow data embedding, *except* one in which we completely change the cryptography to BLS (any deterministic signature scheme could in theory do it, but nobody is going to seriously suggest hash-based signatures or RSA FDH I think) (thanks nostr:nprofile1qqsrtnjl8xtejc4k7h38gz6akjv0v75vrsdhlznu0slr2n3tatf8w3qpzpmhxue69uhkummnw3ezumt0d5hs64xj85 for thoughts on this), *and* totally cripple any programmability. And since quantum is coming (so they tell me!) I see basically no chance of this happening.\n\n#bitcoin #cryptography ",
"sig": "a7e16bb330ed99a0b9a55a0ef354f99774aee78f6de9bc03ac112b3e43c35deb703e4b2def8a15f460947923acd86403fea3c2b1079168bc0e0ce460ad398e9c"
}