BIP-352: add test vector for edge case - input key intermediate sum zero #2142

pull macgyver13 wants to merge 1 commits into bitcoin:master from macgyver13:bip352-intermediate-sum changing 1 files +134 −0

macgyver13 commented at 2:45 PM on April 15, 2026: contributor

@shuv-amp discovered this edge case and reported to bdk-sp and BlueWallet.

Exercises [A, -A, A] input key pattern where the intermediate sum hits zero after the first two keys, but the final sum is non-zero. Implementations that validate after each pairwise addition (rather than summing all keys first) will incorrectly reject this case. @theStack - the reference implementation summation handles this case correctly as-is

BIP-352: add test vector for edge case - input key intermediate sum zero

Exercises [A, -A, A] input key pattern where the intermediate sum
hits zero after the first two keys, but the final sum is non-zero.
Implementations that validate after each pairwise addition (rather
than summing all keys first) will incorrectly reject this case.

eaa80d312c

murchandamus added the label Proposed BIP modification on Apr 15, 2026
murchandamus added the label Pending acceptance on Apr 15, 2026
theStack commented at 9:53 AM on April 16, 2026: contributor

Concept ACK

Thanks for adding! Can you add a brief entry to the changelog with bumped PATCH version?
murchandamus removed the label Pending acceptance on Apr 16, 2026

Contributors

macgyver13

theStack

Labels

Proposed BIP modification