{"id":6744,"date":"2022-10-07T00:30:00","date_gmt":"2022-10-07T00:30:00","guid":{"rendered":"http:\/\/ci02ad1e8f900026d0"},"modified":"2022-10-07T00:30:00","modified_gmt":"2022-10-07T00:30:00","slug":"drivechain-could-ossify-bitcoin-blockchain","status":"publish","type":"post","link":"https:\/\/bitcoinmagazine.com\/technical\/drivechain-could-ossify-bitcoin-blockchain","title":{"rendered":"Drivechain Could Ossify Bitcoin&#8217;s Blockchain For Good"},"content":{"rendered":"<div id=\"bsf_rt_marker\"><\/div><p><em>This is an opinion editorial by Nikita Chashchinskii, a software developer working on BIP300 sidechains.<\/em><\/p>\n<p>Today, Bitcoin faces a challenge. There are two contradicting requirements necessary for success, and if we want to win, we have to find a way to satisfy both. First there is the requirement for security \u2014 it is paramount when billions of dollars are at stake. In the world of security <a href=\"https:\/\/www.schneier.com\/blog\/archives\/2008\/03\/the_security_mi_1.html\" target=\"_blank\" rel=\"noopener\">professional paranoia<\/a> and <a href=\"https:\/\/security.stackexchange.com\/questions\/2202\/lessons-learned-and-misconceptions-regarding-encryption-and-cryptology\/2210#2210\" target=\"_blank\" rel=\"noopener\">conservatism<\/a> are a necessity. Any single change introduced into Bitcoin software is a potential security vulnerability. Ideally we would freeze Bitcoin\u2019s codebase and then never introduce any changes that don\u2019t fix security vulnerabilities.<\/p>\n<p>This first requirement is already on its way to being satisfied with a creeping <a href=\"https:\/\/bitcoinmagazine.com\/culture\/why-bitcoins-ossification-will-be-necessary\">ossification<\/a>, which is not a conscious strategy, but an accidental political reality established as a result of <a href=\"https:\/\/en.bitcoin.it\/wiki\/Block_size_limit_controversy\" target=\"_blank\" rel=\"noopener\">historical events<\/a> and <a href=\"https:\/\/en.bitcoin.it\/wiki\/Softfork\" target=\"_blank\" rel=\"noopener\">technological<\/a> <a href=\"https:\/\/en.bitcoin.it\/wiki\/Hardfork\" target=\"_blank\" rel=\"noopener\">limitations<\/a>. Every single change that touches consensus must go through a long, extensive and rigorous process of deliberation. You can see this with the <a href=\"https:\/\/bitcoinmagazine.com\/technical\/understanding-taproot-in-a-simple-way\">Taproot<\/a> soft fork, which took 46 months from <a href=\"https:\/\/lists.linuxfoundation.org\/pipermail\/bitcoin-dev\/2018-January\/015614.html\" target=\"_blank\" rel=\"noopener\">proposal<\/a> in January 2018 to <a href=\"https:\/\/www.coindesk.com\/tech\/2021\/11\/13\/taproot-bitcoins-long-anticipated-upgrade-activates-this-weekend\/\" target=\"_blank\" rel=\"noopener\">activation<\/a> in November 2021, and in the more recent <a href=\"https:\/\/bitcoinmagazine.com\/technical\/what-is-bitcoin-checktemplateverify\">OP_CTV activation controversy<\/a>. It may be by accident, but we are on our way to satisfying the first requirement.<\/p>\n<p>There is a grave cost to this unconscious \u201cstrategy\u201d though. In the existing accidental ossification regime we are subject to an extreme, and perhaps even justified, level of risk aversion, because if a decision is reached and a risk is taken, every single Bitcoin user must bear that risk. Technological improvements either take years to implement or are rejected outright. In such a regime we will never see some technological advancements.<\/p>\n<p>In the current situation Bitcoin will never see zero-knowledge cryptography or ring signatures implemented. And so Bitcoin will never have strong privacy. Only <a href=\"https:\/\/z.cash\/\">Bitcoin\u2019s<\/a> <a href=\"https:\/\/www.getmonero.org\/\" target=\"_blank\" rel=\"noopener\">competition<\/a> will have strong privacy.<\/p>\n<p>For scaling we will be stuck with the Lightning Network and with <a href=\"https:\/\/www.coinbase.com\/\" target=\"_blank\" rel=\"noopener\">custodial<\/a> <a href=\"https:\/\/fedimint.org\/\" target=\"_blank\" rel=\"noopener\">solutions<\/a>. Lightning is great as far as it goes, but in terms of scaling it has limitations. Its capacity to onboard new users is <a href=\"https:\/\/www.truthcoin.info\/blog\/lightning-limitations\/\" target=\"_blank\" rel=\"noopener\">limited<\/a>, and it has yet unsolved UX challenges. Besides, some proposals that make Lightning meaningfully better such as <a href=\"https:\/\/anyprevout.xyz\/\" target=\"_blank\" rel=\"noopener\">SIGHASH_ANYPREVOUT<\/a> will either take multiple years to activate or will never be activated.<\/p>\n<p>This is all to say nothing of more experimental ideas and technologies such as Blockstream\u2019s <a href=\"https:\/\/blog.blockstream.com\/en-simplicity-github\/\" target=\"_blank\" rel=\"noopener\">simplicity<\/a> proposal. It enables smart contracts on Bitcoin with a better design than existing smart contract implementations on altcoins. Given the complexity of this proposal, it is very unlikely to ever see the light of day under the existing process. Only <a href=\"https:\/\/ethereum.org\/en\/\" target=\"_blank\" rel=\"noopener\">Bitcoin\u2019s largest competitor<\/a> will have smart contracts.<\/p>\n<p>And that is not all. Besides that, there are the already existing technological improvements in terms of privacy, scaling and smart contracts, which Bitcoin won\u2019t see implemented. We will voluntarily or, worse, accidentally relinquish the power of all future technological innovation to our competition. Our competition is not constrained by ossification at all.<\/p>\n<p>Significant improvements are already left on the table. Imagine how far behind we will be within a decade or two of progress in cryptography and computer science, if the situation doesn\u2019t change.<\/p>\n<p>In order to win, Bitcoin requires a mechanism for change and adaptation to achieve victory in the competitive environment it is in. It doesn\u2019t matter how great Bitcoin is in its current state. Without such a mechanism Bitcoin\u2019s potential will stay fixed, and its competitors\u2019 and adversaries\u2019 potentials will grow. In this situation no matter how far <a href=\"https:\/\/en.wikipedia.org\/wiki\/Pax_Sinica#Periods_of_historical_Pax_Sinica\" target=\"_blank\" rel=\"noopener\">ahead<\/a> you are, and no matter how far <a href=\"https:\/\/en.wikipedia.org\/wiki\/Dark_Ages_(historiography)\" target=\"_blank\" rel=\"noopener\">behind<\/a> your competitors and adversaries, eventually they will <a href=\"https:\/\/en.wikipedia.org\/wiki\/Age_of_Enlightenment\" target=\"_blank\" rel=\"noopener\">catch<\/a> <a href=\"https:\/\/en.wikipedia.org\/wiki\/Industrial_Revolution\" target=\"_blank\" rel=\"noopener\">up<\/a>. Failure to adapt in a competitive environment usually <a href=\"https:\/\/en.wikipedia.org\/wiki\/Opium_Wars\" target=\"_blank\" rel=\"noopener\">doesn\u2019t work out<\/a>.<\/p>\n<p>Unless at some point there is a transition from the tradition and isolation of the <a href=\"https:\/\/en.wikipedia.org\/wiki\/Edo_period\" target=\"_blank\" rel=\"noopener\">Edo period<\/a> to open mindedness and modernization of the <a href=\"https:\/\/en.wikipedia.org\/wiki\/Meiji_(era)\" target=\"_blank\" rel=\"noopener\">Meiji period<\/a>, the British will show up with <a href=\"https:\/\/en.wikipedia.org\/wiki\/Ironclad_warship\" target=\"_blank\" rel=\"noopener\">ironclads<\/a>, <a href=\"https:\/\/en.wikipedia.org\/wiki\/Gatling_gun\" target=\"_blank\" rel=\"noopener\">Gatling guns<\/a> and <a href=\"https:\/\/en.wikipedia.org\/wiki\/Rifle#19th_century\" target=\"_blank\" rel=\"noopener\">rifles<\/a>, and you would be stuck with <a href=\"https:\/\/www.youtube.com\/watch?v=XCtuZ-fDL2E&amp;t=154s\" target=\"_blank\" rel=\"noopener\">samurai swords and horses<\/a>.<\/p>\n<p>These are the two \u201cirreconcilable\u201d requirements we have \u2014 change and security. The only good way to reconcile them, that I am aware of, is to separate Bitcoin into two isolated layers. Layer 1 needs to be a completely ossified base layer, never making any non-security improving changes (in all likelihood that would be the existing Bitcoin Core). Layer 2 needs to be a sidechain layer that is free to take risks and to implement arbitrary features.<\/p>\n<p>There must be a secure two-way peg that lets anyone transfer funds between the base layer and any sidechain on Layer 2 at a 1:1 exchange rate. This two-way peg mechanism and perhaps a <a href=\"https:\/\/www.truthcoin.info\/blog\/blind-merged-mining\/\" target=\"_blank\" rel=\"noopener\">blind merged mining<\/a> arrangement should be the only things that connect Layer 1 and Layer 2.<\/p>\n<p>With this mechanism, the decision of how much technological risk to take on would be made individually and unilaterally by every single user. Any user could move funds into a particular sidechain, and voluntarily accept its trade-offs and risks, or move them back to the ossified security of the base layer at any time.<\/p>\n<p>This individual taking or not taking of risks and trade-offs, which only affects the people who partake in it, would replace the existing process of collective risk taking through deliberation by the entire community and all-or-nothing introduction of changes that affect every single Bitcoin user.<\/p>\n<p>There already exists a <a href=\"https:\/\/help.blockstream.com\/hc\/en-us\/articles\/900002386446-How-does-the-Liquid-Federation-s-multisig-work-\" target=\"_blank\" rel=\"noopener\">custodial<\/a> implementation of this idea \u2014 the Liquid Network. But, because it is custodial, it is flawed. In order to attack it you need to compromise five custodians distributed around the world and not just one, which is a lot better than something like Coinbase, but it is custodial nonetheless.<\/p>\n<p>Liquid\u2019s success has been pretty limited. As of September 14, 2022 according to <a href=\"https:\/\/liquid.net\/\" target=\"_blank\" rel=\"noopener\">liquid.net<\/a> there are 3,560 BTC pegged into the network. That is around $71 million or 0.019% of the current circulating BTC supply of slightly more than 19 million coins. It is better than nothing, but an implementation that relies on an 11-of-15 multisig controlled by 15 <a href=\"https:\/\/help.blockstream.com\/hc\/en-us\/articles\/900002163803\" target=\"_blank\" rel=\"noopener\">functionary incorporated companies<\/a> around the world requires an unacceptable level of trust for a supposedly trustless distributed cryptocurrency, which is reflected in peoples\u2019 reluctance to actually use it \u2014 hence there is only ~$71 million in it.<\/p>\n<p>There is a non-custodial implementation of the exact same idea proposed in <a href=\"https:\/\/github.com\/psztorc\/bips\/blob\/master\/bip-0300.mediawiki\" target=\"_blank\" rel=\"noopener\">BIP300<\/a> and <a href=\"https:\/\/github.com\/psztorc\/bips\/blob\/master\/bip-0301.mediawiki\" target=\"_blank\" rel=\"noopener\">BIP301<\/a> \u2014 <a href=\"https:\/\/www.drivechain.info\/\" target=\"_blank\" rel=\"noopener\">Drivechain<\/a>. It requires a softfork to be activated, but it is distributed and trustless. The two-way peg is secured by paying all sidechain transaction fees to miners to perform a fixed and very simple set of functions. You can get the full description of the mechanism in the BIPs.<\/p>\n<p>This is a substantial security improvement over Liquid. In order to attack Liquid you only have to compromise five incorporated functionaries, which is a woefully insufficient security arrangement given the kinds of <a href=\"https:\/\/en.wikipedia.org\/wiki\/Nation_state\" target=\"_blank\" rel=\"noopener\">adversaries<\/a> Bitcoin might face if it continues to grow. In order to attack Drivechain you have to perform a 51% attack sustained over three months, while making it painfully obvious to every single participant of the network that you are performing an attack and giving said participants plenty of time to respond.<\/p>\n<p>With Drivechain we have a way to reconcile our two \u201cirreconcilable\u201d requirements for change and for security. We can ossify Bitcoin more completely than with the existing \u201caccidental political reality\u201d kind of ossification, we can preserve Bitcoin\u2019s trustless and distributed nature, and at the exact same time, we can ensure that, in the future, we would be the \u201cBritish\u201d with metaphorical <a href=\"https:\/\/en.wikipedia.org\/wiki\/Zero-knowledge_proof\" target=\"_blank\" rel=\"noopener\">ironclads<\/a>, <a href=\"https:\/\/blog.blockstream.com\/en-simplicity-github\/\" target=\"_blank\" rel=\"noopener\">Gatling guns<\/a> and <a href=\"https:\/\/bitcoinhivemind.com\/\" target=\"_blank\" rel=\"noopener\">rifles<\/a>, and our competitors and adversaries would be the ones stuck with metaphorical samurai swords and horses.<\/p>\n<p><em>This is a guest post by Nikita Chashchinskii. Opinions expressed are entirely their own and do not necessarily reflect those of BTC Inc or Bitcoin Magazine.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Drivechain could provide an avenue for continuing development on Bitcoin while not compromising the security created by ossification.<\/p>\n","protected":false},"author":2899,"featured_media":6745,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[35],"tags":[227,337,1686,518,1831,59],"class_list":{"0":"post-6744","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-technical","8":"tag-bitcoin-core","9":"tag-development","10":"tag-drivechain","11":"tag-layer-2","12":"tag-martys-bent","13":"tag-opinion"},"author_data":{"id":2899,"name":"Nikita Chashchinskii","nicename":"nikita-chashchinskii","avatar_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/12\/headshot_400-96x96.jpg"},"featured_image_url":"https:\/\/bitcoinmagazine.com\/wp-content\/uploads\/2024\/11\/bitcoin-miner-vault-wallet-hodl.png","_links":{"self":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/6744","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/users\/2899"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/comments?post=6744"}],"version-history":[{"count":0,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/posts\/6744\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media\/6745"}],"wp:attachment":[{"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/media?parent=6744"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/categories?post=6744"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinmagazine.com\/wp-json\/wp\/v2\/tags?post=6744"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}