Quote from: TierNolan on February 20, 2016, 06:53:06 PM

Quote from: TPTB_need_war on February 20, 2016, 04:25:26 PM

You have not explained to me what cut and choose solves, how it solves it, etc.. The quoted explanation is incomplete.

Cut and choose is required because there is no way to commit to releasing a private key.

You can commit to releasing the value of x such that hash(x) = y.

If both coins support CLTV, then you can commit to a hash and no cut and choose is required.

Understood.

Quote from: TierNolan on February 20, 2016, 06:53:06 PM

Few altcoins actually support it. The cut and choose allows you to commit to releasing a private key for a given public key. It's a cheat.

You commit to a hash of the private key. The cut and choose is to make sure that the hash actually refers to a private key.

The other party can make an altcoin payment to a 2 of 2 multisig with confidence. Since you committed to releasing the private key before the timeout, it eliminates the hold up risk.

I don't understand the mechanism. Please explain how the protocol accomplishes the goal.