standardize on bitcoin signed ecies ?

standardize on bitcoin signed ecies ?
2014-08-27  1:08 ` Gregory Maxwell
  
From: Mem Wallet @ 2014-08-27  0:57 UTC (permalink / raw)
  To: bitcoin-development

[-- Attachment #1: Type: text/plain, Size: 322 bytes --]

Does anyone see a value in a standardized PGP-style message,
which would allow someone performing a bitcoin transaction to
send signed encrypted messages using only public and private
bitcoin keys ?

I'd like to propose a signed encrypted message protocol, in case
someone see's value in encoding such a thing into a BIP.

[-- Attachment #2: Type: text/html, Size: 437 bytes --]

 permalink raw reply	[|nested]
2014-08-27  0:57 [Bitcoin-development] standardize on bitcoin signed ecies ? Mem Wallet

  
From: Gregory Maxwell @ 2014-08-27  1:08 UTC ( / )
  To: Mem Wallet;  Bitcoin Development

On Tue, Aug 26, 2014 at 5:57 PM, Mem Wallet <memwallet.info@gmail•com> wrote:
>
> Does anyone see a value in a standardized PGP-style message,
> which would allow someone performing a bitcoin transaction to
> send signed encrypted messages using only public and private
> bitcoin keys ?
>
> I'd like to propose a signed encrypted message protocol, in case
> someone see's value in encoding such a thing into a BIP.

Using the same keys for signing and encryption is generally considered
a bad practice, for a number of reasons.

If the keys aren't the same, there is much less reason to use
something specific to Bitcoin.

Getting all the details right in an encryption implementation is very
difficulty, previously published efforts in Bitcoin software have been
_severely_ flawed and insecure. I am not confident that an effort
right now would receive adequate review.