bip-ec-ops: add initial draft #1945

pull Roasbeef wants to merge 9 commits into bitcoin:master from Roasbeef:ec-ops-bip changing 29 files +2037 −0

Roasbeef commented at 0:47 am on August 25, 2025: contributor

In this PR, we add a new draft BIP proposing the addition of fundamental Elliptic Curve op codes. Amongst other things, this series of op codes permits the computation of the top level Taproot output public key in Bitcoin Script. This enables a new flavor of on-chain state machines, in addition to many other use cases.
bip-ec-ops: initial draft ebf017e010
bip-ec-ops: add test vectors to repo + BIP b85ce9fb82
bip-ec-ps: move ref impl section up 8695fbb1c3
bip-ec-ops: add in-line code examples 504356acfa
bip-ec-ops: update python ref to reduce scalar f04a46c294
bip-ec-ops: clean up preamble section 89b1e2d4c9
bip-ec-ops: fix typos 73b4bd0b7d
bip-ec-ops: tighten up spec section 78f6084b54
bip-ec-ops: expand rationale, add missing sections 8df28249da
jonatack added the label New BIP on Aug 25, 2025
Saad4343 commented at 9:39 am on August 25, 2025: none

Love for you
in bips-ec-ops.md:1268 in 8df28249da
1263+ 1264+# Acknowledgments 1265+ 1266+# Copyright 1267+ 1268+This document is licensed under the 3-clause BSD license.
jonatack commented at 8:34 pm on August 25, 2025:

Duplicate Copyright section with the one at lines 28-30, can remove one of the two.

in bips-ec-ops.md:7 in 8df28249da

0@@ -0,0 +1,1268 @@
1+```
2+  BIP: ???
3+  Layer: Consensus (soft fork)
4+  Title: Elliptic Curve Operations for Bitcoin Script
5+  Author: Olaoluwa Osuntokun <laolu32@gmail.com>
6+  Comments-Summary: X
7+  Comments-URI: X

jonatack commented at 8:56 pm on August 25, 2025:

0Comments-Summary: No comments yet.
1Comments-URI: https://github.com/bitcoin/bips/wiki/Comments:BIP-TBD

in bips-ec-ops.md:20 in 8df28249da

15+
16+# Introduction
17+
18+## Abstract
19+
20+This document specifies a series of Elliptic Curve opcodes for secp256k1. These

jonatack commented at 9:05 pm on August 25, 2025:

Suggest listing the new opcodes here.

0This document specifies a series of Elliptic Curve opcodes for secp256k1: `OP_EC_POINT_ADD`, `OP_EC_POINT_MUL`, `OP_EC_POINT_NEGATE`, and `OP_EC_POINT_X_COORD`. These

(nit, use consistent spelling of “opcode” or “op code” in this document – I prefer “opcode”)

in bips-ec-ops.md:55 in 8df28249da

50+on-chain covenant state machine. This extra output increase the size of the
51+transaction, uses a legacy output type, and further increases the introspection
52+Script size.
53+
54+With the addition of the `OP_EC_POINT_ADD`, `OP_EC_POINT_MUL`, and
55+`OP_EC_POINT_X_COORD` op codes (in concert with `OP_CAT`), a Bitcoin Script

jonatack commented at 9:05 pm on August 25, 2025:

Should OP_EC_POINT_NEGATE be in this list?

jonatack commented at 9:08 pm on August 25, 2025: member

Looks quite complete.

Contributors
Roasbeef Saad4343 jonatack

Labels
New BIP