Mimblewimble and Scriptless Scripts | Andrew Poelstra (Blockstream) | RWC 2018

My LTC's have mimblewimble.... 8)

Epic Cash is the best implementation for Mimblewimble available.

Just a thought, I know this is years late but seems as if the issue is still unsolved. There is a contracting software for bitcoin like chains called simplicity being developed by blockstream where they created a contract that allows you to pay to its state. If grin can adopt simplicity we can have much more flexible dynamics between contracts that won't require auxiliary methods for creating schnorr signatures. Nevertheless the idea is fascinating and I think needs to be done. Effectively what I am suggesting is a version of simplicity for the grinblockchain which uses cross input signature aggregation to create contracts for which the state is verifiable to the end user but is not public information via the same assumptions that build up cross input signature aggregation. Every contract needs public information to work properly , I think having a contract state verification scheme on Grin could still be done in a privacy preserving way.

If you had an infinitely divisible token, you could encode transaction amounts with any kind of data you like. Confidential transactions means transaction amounts are hidden. This is an anonymous messaging system as well as a high compression distributed ledger. This is brilliant!

Litecoin is adding MimbleWimble

Litecoin is adding MimbleWimble

Epic cash!

This will be a game changer

Herro

Of what I understand this is really awesome but man am I kicking myself for not taking more math in school.

This is a fantastic talk. I'm having to listen and relisten to slowly digest it, but fascinating system.

I do wonder about Scriptless Scripts, why call them that? Wouldn't it be better to call them "Secret scripts" or "secret smart contracts" since there can still be a script defining the parameters of a tx, it's just unknown what those are to the rest of the network?

Wow man.

Fuck Blockstream!

Thank you for the great interesting work, Andrew.
Q: Even though you'd lose the possibility to be a "serving" full-node, wouldn't it make sense to have the storage comparison against a "pruned" full-node?
If I understand correctly, pruning still allows you to be a fully validating (though selfish) node.

Can one do loops with scriptless scripts? I wonder.

Ok so is this able to be applied to the past chain of btc, just future transactions or would have to be a completly new crypto?

Although I appreciate all your work, I think it's dangerous to say the name out loud!

Is the presentation slides available somewhere? Thanks