Adapt SIGHASH_FORKID for (1) NU0 replay protection (2) fixing quadratic hashing (3) hardware wallets #2584
Description
Edit 2017-11-20 by Nathan: We need to adapt SIGHASH_FORKID for Zcash by making several modifications: see #2584 (comment). Fulfilling this ticket requires doing that design work.
Upstream Bitcoin Cash clients have implemented SIGHASH_FORKID for
- Replay protection
- Quadratic hashing fix
- Lightweight wallet signing e.g. hardware wallets
SIGHASH_FORKID is specified here:
https://github.com/Bitcoin-ABC/bitcoin-abc/blob/master/doc/abc/replay-protected-sighash.md
and discussed in context here:
https://github.com/Bitcoin-UAHF/spec/blob/master/uahf-technical-spec.md
SIGHASH_FORKID is an implementation of the digest algorithm for transaction signature verification as described in BIP143 (and used in BIP 141).
https://github.com/bitcoin/bips/blob/master/bip-0143.mediawiki
This ticket can resolve #1162, #2411, #2415, #2566 and satisfy #2254.