Skip to content

Conversation

@jl2012
Copy link
Contributor

@jl2012 jl2012 commented Aug 17, 2016

NULLDUMMY is a trivial softfork to fix malleability related to the extra stack element consumed by CHECKMULTISIG(VERIFY). NULLDUMMY is probably more important than LOW_S since without that an attacker may replace the stack element with any value.

==Abstract==

This document specifies proposed changes to the Bitcoin transaction validity rules to restrict signatures to using low S values.
This document specifies proposed changes to the Bitcoin transaction validity rules to fix signature malleability.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe change it into "for common transaction types" ? It certainly does not entirely fix it.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok will clarify. I actually mean malleability of signatures for CHECK(MULTI)SIG(VERIFY). BIP66+BIP146 should fix it entirely

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jl2012 AFAIK even that is not proven.

@btcdrak
Copy link
Contributor

btcdrak commented Aug 17, 2016

Update implementation PR URL to #8533

@jl2012
Copy link
Contributor Author

jl2012 commented Aug 17, 2016

@btcdrak @sipa comments addressed

@luke-jr luke-jr merged commit 0aa7bfc into bitcoin:master Aug 17, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants