Skip to content

Conversation

@petertodd
Copy link
Contributor

Previously BIP62 did not provide a compact way to delibrately encode an invalid signature. For example in BIP19 if m != n with this change you can provide compact OP_0's in the scriptSig rather than lengthy
DER-encoded signatures.

Note that we may want to further expand on this change in the future by saying that only OP_0 is a "valid" invalid signature; BIP19 even with this change is inherently malleable as the invalid signatures can be any validly encoded DER signature.

CC: @sipa

Previously BIP62 did not provide a compact way to delibrately encode an
invalid signature. For example in BIP19 if m != n with this change you
can provide compact OP_0's in the scriptSig rather than lengthy
DER-encoded signatures.

Note that we may want to further expand on this change in the future by
saying that only OP_0 is a "valid" invalid signature; BIP19 even with
this change is inherently malleable as the invalid signatures can be any
validly encoded DER signature.
@sipa
Copy link
Member

sipa commented Jan 9, 2015

ACK

@gmaxwell
Copy link
Contributor

gmaxwell commented Jan 9, 2015

ACK.

laanwj added a commit that referenced this pull request Mar 11, 2015
…invalid-sigs

BIP62: Make OP_0 a validly encoded signature
@laanwj laanwj merged commit ced361d into bitcoin:master Mar 11, 2015
jonatack pushed a commit to jonatack/bips that referenced this pull request Nov 12, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants