<oembed><type>rich</type><version>1.0</version><author_name>npub1q86n5vtxkwerzwfqza3hwls8pl8764244464talfqy2vpj0qaz6q38qwta</author_name><author_url>https://nostr.ae/npub1q86n5vtxkwerzwfqza3hwls8pl8764244464talfqy2vpj0qaz6q38qwta</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>📅 Original date posted:2021-07-12&#xA;📝 Original message:&#xA;Another option would be to somehow encrypt this data in, say, an OP_RETURN&#xA;for any update transaction for each participant (perhaps worth breaking&#xA;update symmetry for efficiency on this...) that way if an update ever&#xA;happens on a state you don&#39;t have you can use your static key to decrypt&#xA;the relevant data for what PK_si signed off on.&#xA;&#xA;&#xA;--&#xA;@JeremyRubin &lt;https://twitter.com/JeremyRubin&gt;&#xA;&lt;https://twitter.com/JeremyRubin&gt;&#xA;&#xA;&#xA;On Mon, Jul 12, 2021 at 3:16 PM Jeremy &lt;jlrubin at mit.edu&gt; wrote:&#xA;&#xA;&gt; Without an exact implementation, one thing you could do to fix the lost&#xA;&gt; state issue would be to make the scripts something like:&#xA;&gt;&#xA;&gt; [`&lt;N+1&gt; CLTV DROP PKu CHECKSIGVERIFY GETLOCKTIME &lt;PK_root&gt;&#xA;&gt; BIP32DERIVE CHECKTRANSACTIONSIGNEDFROMSTACK`, `2016 CSV DROP PK_si&#xA;&gt; CHECKSIG`]&#xA;&gt;&#xA;&gt; In order to upgrade to state M&gt;= N+1 you&#39;d have to publish a transaction&#xA;&gt; signed with the BIP32 derived key for that update in the future.&#xA;&gt;&#xA;&gt; The downside is that you end up double publishing the txdata on the chain,&#xA;&gt; but it at least ensure data availability.&#xA;&gt;&#xA;-------------- next part --------------&#xA;An HTML attachment was scrubbed...&#xA;URL: &lt;http://lists.linuxfoundation.org/pipermail/lightning-dev/attachments/20210712/54e583d7/attachment.html&gt;</html></oembed>