BIP62: Make OP_0 a validly encoded signature #132

pull petertodd wants to merge 1 commits into bitcoin:master from petertodd:bip62-compact-validly-encoded-invalid-sigs changing 1 files +1 −1

petertodd commented at 10:52 AM on January 9, 2015: contributor

Previously BIP62 did not provide a compact way to delibrately encode an invalid signature. For example in BIP19 if m != n with this change you can provide compact OP_0's in the scriptSig rather than lengthy DER-encoded signatures.

Note that we may want to further expand on this change in the future by saying that only OP_0 is a "valid" invalid signature; BIP19 even with this change is inherently malleable as the invalid signatures can be any validly encoded DER signature.

CC: @sipa

BIP62: Make OP_0 a validly encoded signature

Previously BIP62 did not provide a compact way to delibrately encode an
invalid signature. For example in BIP19 if m != n with this change you
can provide compact OP_0's in the scriptSig rather than lengthy
DER-encoded signatures.

Note that we may want to further expand on this change in the future by
saying that only OP_0 is a "valid" invalid signature; BIP19 even with
this change is inherently malleable as the invalid signatures can be any
validly encoded DER signature.

cea602ef6c

petertodd cross-referenced this on Jan 9, 2015 from issue Make empty byte arrays pass CheckSignatureEncoding() by petertodd
sipa commented at 11:48 PM on January 9, 2015: member

ACK
gmaxwell commented at 11:49 PM on January 9, 2015: contributor

ACK.
laanwj referenced this in commit ced361de1d on Mar 11, 2015
laanwj merged this on Mar 11, 2015
laanwj closed this on Mar 11, 2015
jonatack referenced this in commit c936a9bc4b on Nov 12, 2019

Contributors

petertodd

sipa

gmaxwell