MTM22: The Cryptography Workbook (part 1)
<p><strong>Fundamentals. </strong>@Fundamentals21m<br />Book: <a href="https://zeuspay.com/btc-for-institutions" target="_blank">https://zeuspay.com/btc-for-institutions</a><br />npub12eml5kmtrjmdt0h8shgg32gye5yqsf2jha6a70jrqt82q9d960sspky99g<br /><br /><strong>AverageGary</strong><br />npub160t5zfxalddaccdc7xx30sentwa5lrr3rq4rtm38x99ynf8t0vwsvzyjc9<br /><br />Cryptography Wookbook: <a href="https://github.com/cryptography-camp/workbook" target="_blank">https://github.com/cryptography-camp/workbook</a><br />---- navigate to the current release on the right tab to download the workbook<br />---- DO NOT LISTEN TO THE EPISODE UNLESS YOU HAVE THE WORKBOOK HANDY<br /><br />We’re back and recommitting to our North Star: getting comfortable with the math behind Bitcoin-grade cryptography. In this kickoff, we set the stage for a multi‑episode journey through a cryptography “workbook” on discrete‑log‑based multiparty signatures—using it as a scaffold to build real intuition for groups, fields, rigor, and proofs without being intimidated by jargon. We talk prerequisites (Z_p operations, cyclic groups, conditional probability, union bound, proof by contraposition), why rigor matters more than vibes, and how abstraction lets us reason cleanly about things like elliptic‑curve “addition” and key‑tweaking. We also peek at the table of contents we’ll tackle: negligible functions, games and asymptotic security, hash functions and collision resistance, commitments and accumulators (hello, Utreexo), one‑time and Lamport signatures, the discrete log problem, Pedersen commitments, DDH, ElGamal, the random‑oracle model and forking lemma, all the way to Schnorr signatures, key‑tweaks, and interactive aggregate signatures (e.g., DahLIAS). Expect a mix of precise definitions, worked examples, and occasional reinforcements from friends smarter than us—plus some probability detours like Monty Hall and Poisson to keep our statistical muscles warm.<ul><li>'DahLIAS: Discrete Logarithm-Based Interactive Aggregate Signatures': <a href="https://eprint.iacr.org/2025/692" target="_blank">https://eprint.iacr.org/2025/692</a></li><li>'BIP-340: Schnorr Signatures for secp256k1': <a href="https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki" target="_blank">https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki</a></li><li>'Bitcoin Optech Topic: Schnorr Signatures': <a href="https://bitcoinops.org/en/topics/schnorr-signatures/" target="_blank">https://bitcoinops.org/en/topics/schnorr-signatures/</a></li><li>'Taproot (overview)': <a href="https://bitcoinops.org/en/topics/taproot/" target="_blank">https://bitcoinops.org/en/topics/taproot/</a></li><li>'Utreexo: A dynamic hash-based accumulator optimized for the Bitcoin UTXO set (MIT DCI)': <a href="https://www.dci.mit.edu/utreexo" target="_blank">https://www.dci.mit.edu/utreexo</a></li><li>'Random Oracle Model (overview)': <a href="https://en.wikipedia.org/wiki/Random_oracle" target="_blank">https://en.wikipedia.org/wiki/Random_oracle</a></li><li>'Forking Lemma (cryptography)': <a href="https://en.wikipedia.org/wiki/Forking_lemma" target="_blank">https://en.wikipedia.org/wiki/Forking_lemma</a></li><li>'Decisional Diffie–Hellman (DDH) assumption': <a href="https://en.wikipedia.org/wiki/Decisional_Diffie%E2%80%93Hellman_assumption" target="_blank">https://en.wikipedia.org/wiki/Decisional_Diffie%E2%80%93Hellman_assumption</a></li><li>'Diffie–Hellman key exchange': <a href="https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange" target="_blank">https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange</a></li><li>'ElGamal cryptosystem': <a href="https://en.wikipedia.org/wiki/ElGamal_encryption" target="_blank">https://en.wikipedia.org/wiki/ElGamal_encryption</a></li><li>'Pedersen commitment': <a href="https://en.wikipedia.org/wiki/Pedersen_commitment" target="_blank">https://en.wikipedia.org/wiki/Pedersen_commitment</a></li><li>'Lamport signature': <a href="https://en.wikipedia.org/wiki/Lamport_signature" target="_blank">https://en.wikipedia.org/wiki/Lamport_signature</a></li><li>'Discrete logarithm (background)': <a href="https://en.wikipedia.org/wiki/Discrete_logarithm" target="_blank">https://en.wikipedia.org/wiki/Discrete_logarithm</a></li><li>'Finite field (Z_p basics)': <a href="https://en.wikipedia.org/wiki/Finite_field" target="_blank">https://en.wikipedia.org/wiki/Finite_field</a></li><li>'Cyclic group': <a href="https://en.wikipedia.org/wiki/Cyclic_group" target="_blank">https://en.wikipedia.org/wiki/Cyclic_group</a></li><li>'Conditional probability': <a href="https://en.wikipedia.org/wiki/Conditional_probability" target="_blank">https://en.wikipedia.org/wiki/Conditional_probability</a></li><li>'Union bound': <a href="https://en.wikipedia.org/wiki/Union_bound" target="_blank">https://en.wikipedia.org/wiki/Union_bound</a></li><li>'Monty Hall problem': <a href="https://en.wikipedia.org/wiki/Monty_Hall_problem" target="_blank">https://en.wikipedia.org/wiki/Monty_Hall_problem</a></li><li>'Poisson distribution': <a href="https://en.wikipedia.org/wiki/Poisson_distribution" target="_blank">https://en.wikipedia.org/wiki/Poisson_distribution</a></li><li>'Contraposition (proof technique)': <a href="https://en.wikipedia.org/wiki/Contraposition" target="_blank">https://en.wikipedia.org/wiki/Contraposition</a></li><li>'Riverside (recording platform)': <a href="https://riverside.fm" target="_blank">https://riverside.fm</a></li><li>'Nostr protocol (reference repo)': <a href="https://github.com/nostr-protocol/nostr" target="_blank">https://github.com/nostr-protocol/nostr</a></li></ul></p>
