2

Bitcoin Core, in its BIP37 implementation, will compute the Merkle proofs on the fly. It does not store the blocks' Merkle trees anywhere (only its root is stored).


2

Yes, these kinds of attack do effect Bitcoin and are known and described. Bitcoin does not have any consensus level mitigations for them because doing so requires consensus changes which are difficult to do. It is known that Bitcoin's merkle tree design has multiple vulnerabilities. The particular attack described on wikipedia is that an internal level can ...


1

Bitcoin transactions are not stored in a Merkle tree. That is just one way of representing them. The most common serialization for blocks is just: Header (prevhash, merkleroot, time, nonce, difficulty, version) Number of transactions Concatenation of all those transactions This serialization is used on the P2P network in block messages, as well as on disk ...


1

Merkle trees in general are useful in the context of a prover-verifier model. A prover Peggy wants to prove to verifier Victor that a merkle root R, which Victor knows ahead of time, commits to a tree which includes a specific leaf L. To do so, Peggy would send the element L well as the Merkle proof (or branch) containing all hashing partners L is combined ...


Only top voted, non community-wiki answers of a minimum length are eligible