diff --git a/zip-0221.rst b/zip-0221.rst index 0339067a..25b33433 100644 --- a/zip-0221.rst +++ b/zip-0221.rst @@ -689,7 +689,7 @@ and append operations. In the worst case scenario, a well-resourced attacker cou maintain 2 chains of approximately equal length, and alternate which chain they extend. This would result in repeated reorgs of increasing length. -Given the performance of Blake2b, we expect this validation cost to be negligible. +Given the performance of BLAKE2b, we expect this validation cost to be negligible. However, it seems prudent to benchmark potential MMR implementations during the implementation process. Should the validation cost be higher than expected, there are several potential mitigations, e.g. holding recently seen nodes in memory after a reorg.