使用比特币金库的托管协议
Custody Protocols Using Bitcoin Vaults
摘要：
比特币\textit{covenant}是一种对未来比特币交易实施条件的机制。比特币\textit{vault}是一种特定类型的契约交易，它对将资金控制权转移到热钱包实施时间锁定，但能够立即将资金转移到深度冷恢复钱包中。本文演示了如何将比特币保险库集成到托管协议中，并演示了该协议的安全属性。该保险库使用具有安全密钥删除的预签名事务来实现（如\cite{Swambo2020cov}中所提出的）。它表明，金库保管协议，使钱包所有者指定其所需的平衡之间的内在权衡的安全性和可访问性的比特币持有通过调整时间锁的长度。它还表明，钱包所有者通过在众多金库交易中划分资金来增加对风险管理的控制。虽然完全防止盗窃是不现实的，但最有可能的盗窃场景（危及热钱包）严重限制了攻击者的盈利能力，从一开始就阻止了盗窃企图。所提出的架构旨在通过冗余和容错功能提供深度防御，以及通过硬件和软件层的多样性进行类突破的对策。最后，该架构采用检测（瞭望塔）和响应系统，通过第二种类型的契约交易，即推到恢复钱包交易，从尝试或部分盗窃中实现故障安全恢复。
英文摘要：
A bitcoin \textit{covenant} is a mechanism to enforce conditions on future bitcoin transactions. A bitcoin \textit{vault} is a specific type of covenant transaction that enforces a time-lock on the transfer of control of funds to a hot wallet, but enables an immediate transfer of funds into a deep cold recovery wallet. This paper demonstrates how to integrate a bitcoin vault into a custody protocol and demonstrates the security properties of that protocol. The vault is implemented using pre-signed transactions with secure key deletion (as proposed in \cite{Swambo2020cov}). It is shown that vault-custody protocols enable the wallet owner to specify their desired balance for an inherent trade-off between the security of and accessibility of bitcoin holdings by adjusting the length of time-locks used. It is also demonstrated that wallet owners have increased control of risk-management by compartmentalizing funds across numerous vault transactions. While it isn't realistic to completely prevent theft, the most likely theft scenarios (compromising the hot wallet) have severely limited profitability for an attacker, deterring attempts at theft from the beginning. The proposed architecture was designed to offer defence-in-depth through redundancy and fault-tolerant functionality as well as countermeasures for class breaks through diversity across hardware and software layers. Finally, the architecture employs a detection (a watchtower) and response system that enables fail-safe recovery from attempted or partial thefts through a second type of covenant transaction, a push-to-recovery-wallet transaction.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
