From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 30 Oct 2025 15:29:24 -0700 Received: from mail-oa1-f59.google.com ([209.85.160.59]) by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1vEb91-0003Xp-NE for bitcoindev@gnusha.org; Thu, 30 Oct 2025 15:29:24 -0700 Received: by mail-oa1-f59.google.com with SMTP id 586e51a60fabf-3d405f90fcbsf1150833fac.1 for ; Thu, 30 Oct 2025 15:29:23 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1761863358; cv=pass; d=google.com; s=arc-20240605; b=aqVBDIDnWPL4SgDtU7yRGFUc+tEQHOFzzSU0T3fnQPFh6FMk9t7AoN13xRHZM33Of3 1wi1WtgAvJ0SaeBIh4ca4dZIBSnPKbN6bhNrJ+zDMgYHNykMH57kd+IjT42dLcqiXrij wgahoDDFKX8euK0d1d4jv3BrNuYazARx2e0Tfet2B3C+J+ImaTfOAe8Rbjj2E9ld18du huAwuL7+APAz654oWM7HMYW8soIFEq4rqTX7ZLlhykOLqwAI4LEChBYJT7Ikun8l1wUn n+DOV33n6kXRt91HBVsDe+mcas74udGrjIOjThSq7D+6CIt5vDLh9QtOoQ5KGtMHCKKU tAjw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:to:subject:message-id:date :from:in-reply-to:references:mime-version:dkim-signature; bh=KFWaCC+naJ4781HFY1yxYXuay5tfTBE/G8Y+nlQUF5U=; fh=OnR8nWtkynoQ57HlUQLj0r8cqOhsP9RET6uj40gFN+M=; b=EsrEuohNoVwk4sXXW7FowgnC7n4WkTrfio8iSpq3yaKK6pFjlj1hmrGRUfmk2WMU5S q9IfwEYMrtPCvx3/FCUlBn28eH6At9PaFiSEDDav9s8qO3gwThfpp3FmP+RrUn0GctwT Ev3UMxgMXtA8BrKarVL0XKg1XKgoSV9ukoVuOFJxE0z30ZsqeaVaRGm2B10o8jPFxMzZ xQlNhZY0VY3K81XBLRSKU3IrhRNWqNjBlcS0vfqJYonpP1XmqXjL1xRfpjEytJqHccG+ IvLkp0jhbdsuF+iEXyRFJ6kvFnADIWojQmgrBkaJt5jA+8vk6bEKk4WPPAfBMEEb/IRR c17Q==; darn=gnusha.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@blockstream.com header.s=google header.b=WhsHYZqY; spf=pass (google.com: domain of roconnor@blockstream.com designates 2607:f8b0:4864:20::536 as permitted sender) smtp.mailfrom=roconnor@blockstream.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=blockstream.com; dara=pass header.i=@googlegroups.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1761863358; x=1762468158; darn=gnusha.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:to:subject :message-id:date:from:in-reply-to:references:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=KFWaCC+naJ4781HFY1yxYXuay5tfTBE/G8Y+nlQUF5U=; b=nTeUArYZaZoY3W72QDzQP/2qsb31kcth3dvj33zmIvQrUw5WrI1bwZjRwE+egwsY7r lVWL4h7yKAFcWiSr3brmkXyXhGBLQGbe4EQUs8aPvdWY4BNWMb5pIxOUwVYi4WUj+LKO BzVYOXz5cgZ1aPaRdfxEolX6Hw9GNLPEXV3o5i3+U85FUOJPgpNGVbrd86wHT3CdHf0N 2HSV18xOM9ZCtROrEDwnM1ZlvhgB3wR674P2LvpiK0GPg0YBmqZ7TU+Ih8yOSVmob/1R OSsPZvMZ+qdRvLuZ0xZOXlAAY3rBa58prcvZM+ADB/AN+W41e4tNsZ6caD0MQr0AaDu0 wTJg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761863358; x=1762468158; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:to:subject :message-id:date:from:in-reply-to:references:mime-version :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=KFWaCC+naJ4781HFY1yxYXuay5tfTBE/G8Y+nlQUF5U=; b=rTGvyE5ZXZdbkStfIlhVYEK3US+QTXk8aHI6PpE9r+i3Nj1p8RJ6K4acc+ssv1J3w2 WuEIMoWrd/gDBtESwGGFzch6AhoSn9exoiUSpx0pJuJ3rfAuKp9XPdMGgMFuap37v+/d TDM5sriENo85h/8qOMO9ZPntqsZibT5b4lHyhQ8cdrhaqSHctCBqtN3UaV46K+fkpd5J qYHIfyzXBxqjSCdKXhSxWQLLcdiSVLkO6UtL/CJdhJbmUOKkR2aJ2fhhmOmO+xwqZ8ZA qMa7QZOi+ptrCVMRDvS1kyDujnHU9P5bLhb3b8FSe75o0hOAtwdJmYX2orl7A3c4IWIb bBEg== X-Forwarded-Encrypted: i=2; AJvYcCUxK8BeqICbj4FcfDNv1KWvEyQpLr6cmHs0sSLnzBEk7zaN662AyOcVmeXbrqAqlhdQtPnqxShQ5+NE@gnusha.org X-Gm-Message-State: AOJu0YwFZw94S5ZkTSV1puQOUSdk90O6hzZyT3tNeFdFcF7NSLBtLy25 CXNGEChaDhPS2Fm6Wu+ez2nbx9a+olBhwdlxBjCD5xNnoEvjp0pZ1Vt4 X-Google-Smtp-Source: AGHT+IELP1yMmaR4vD5+SBbvqhtEoeGvwDsvJyyIZiu69oBvBmzk2zrwbbH698tl7KNgSB5c1ljw1A== X-Received: by 2002:a05:6870:c684:b0:3d1:ad3f:28bd with SMTP id 586e51a60fabf-3dacb34d448mr342001fac.5.1761863357457; Thu, 30 Oct 2025 15:29:17 -0700 (PDT) X-BeenThere: bitcoindev@googlegroups.com; h="Ae8XA+a3F0i6V2Gc0HxwT5AcZQEgR4E2cnNC1Bj0nvdfcOgOkQ==" Received: by 2002:a4a:a746:0:b0:656:77c7:8eb7 with SMTP id 006d021491bc7-656824972ebls804232eaf.1.-pod-prod-01-us; Thu, 30 Oct 2025 15:29:13 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCUls2Dp8/N6TRbK/RTOsSfYDIk9phXyKCKRx6XkkfYw+aOL+UR/SUf+cxCw5EvrRGU9dIi3ITSv0fou@googlegroups.com X-Received: by 2002:a05:6808:f8b:b0:43d:2d6f:bbb1 with SMTP id 5614622812f47-44f95f87d09mr541101b6e.37.1761863353369; Thu, 30 Oct 2025 15:29:13 -0700 (PDT) Received: by 2002:a05:620a:5307:b0:88e:3943:194a with SMTP id af79cd13be357-8abaf87dddams85a; Thu, 30 Oct 2025 15:23:34 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCV6RevssBVnuoAiuihBDwEXwKYQumqv5iyDgMUZnIQtjQZtM4y5I1IBDTEXH9JjlN+z7KNa0bgNKYCK@googlegroups.com X-Received: by 2002:a05:6214:194c:b0:880:1b8a:9917 with SMTP id 6a1803df08f44-8802f2ef8f7mr18323416d6.18.1761863012769; Thu, 30 Oct 2025 15:23:32 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1761863012; cv=none; d=google.com; s=arc-20240605; b=LHFuQ0IMJVQsFTMFw6wKqQCw6ARLrWkQf3yv9jYIbtb43l/PtvZl+ZeFUwCRg5OQ/u G7PxfYZ1H9fIfn41EmNiOAmBJr+kZrD9gR0DGmV+Xkdj4XLHU6q16iX5UhrCY3TfvtqU 8Ev/ah15vF3Jv/3vno1y0ECPJDE9vGRHiqVVGXMz7/ucn7tk41r1CGhJn1haM4TBmgyU pRmPD/35gHomuZfikRuXVwTwPHSU3PCdHJgMG+ICs6tlkWPVYwWe/9Q14tEYFxuKnoBB 3bNSqw0rD23sctVNA3MqJnnYM9eWUiq9aI5Jx8Ttgkwuo6gYG6LnaFImTHgXWdQA68xY vOdg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=u2+V3EjEOR9/qSmM+0TImm+0SRP5RzFA7Vq9acI+BTs=; fh=BNBcyFBK/fdYGTF3tnu+B+HtBz8vOjkDCpRx9L1w1ww=; b=RC1Hd4NjdJ31XImX+hGQrXugl9VE0HMvx/sDu5lIcdqf5CpmUFx+ygEmYOvnK9X0lr Q3n4+0gXI6WZ/zlRzSwWjSmXJFlkSZNnapfqS+stlog9l3YsXjskFNgaRveika/NVEJr 6IhNks7jqc/0dUhtEAYtY4z0Vpim55WeBwYcCxjXpQqVNGGDyNQ5IVv5aGi4N124onGs QOzprXF1vd0tI1PDp6cd0oGb4pKsoRXFQjx6/A+mPh4sz1aZElf6xcRLi+e2u35q5amB zMC24fVLPf2NFqs8RTyGnVtLSFkMhJlIKwIneCFYSmUT7IOPEOrn9c1cTS6Wcre2FnjB /1rw==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@blockstream.com header.s=google header.b=WhsHYZqY; spf=pass (google.com: domain of roconnor@blockstream.com designates 2607:f8b0:4864:20::536 as permitted sender) smtp.mailfrom=roconnor@blockstream.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=blockstream.com; dara=pass header.i=@googlegroups.com Received: from mail-pg1-x536.google.com (mail-pg1-x536.google.com. [2607:f8b0:4864:20::536]) by gmr-mx.google.com with ESMTPS id 6a1803df08f44-87fc6773e90si9773856d6.4.2025.10.30.15.23.32 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 30 Oct 2025 15:23:32 -0700 (PDT) Received-SPF: pass (google.com: domain of roconnor@blockstream.com designates 2607:f8b0:4864:20::536 as permitted sender) client-ip=2607:f8b0:4864:20::536; Received: by mail-pg1-x536.google.com with SMTP id 41be03b00d2f7-b5a631b9c82so1059953a12.1 for ; Thu, 30 Oct 2025 15:23:32 -0700 (PDT) X-Forwarded-Encrypted: i=1; AJvYcCWj2gaztbOexU880RV9fo7wKxSCZxy9AxwXsLpqZ7x536VMzVp0pmim6T06fDgu+f6TisV2nAPooDMM@googlegroups.com X-Gm-Gg: ASbGncsRVtUxKtPrsj/XzzCVjfi3mvcG0Rhk9hAwTa5rnu4KWtWbPc9SNdbdVI6tWbI LFk0YERP9VcZdFzjDk2Rnx9A7NpEhSoyLcyAmoBLqLvRrRe+nesz/gK0mVgnWQep9a1kNL6GQ6b h/MBR6sVWAKyYY7G+8knqvCtJPyQthKakM7PKtTqlphe84tFhQZ2ivrHhMM6QkXlWPtzXP/3As2 adDuT70heiTnWRWt352FP6J/AWqkv8y2Qei9TofN5Ykv1tqAeHUHBIg6m0LMuauzoRIUK3d X-Received: by 2002:a17:902:ea0a:b0:294:fba1:94b0 with SMTP id d9443c01a7336-2951997e53emr17615055ad.0.1761863011991; Thu, 30 Oct 2025 15:23:31 -0700 (PDT) MIME-Version: 1.0 References: <6f6b570f-7f9d-40c0-a771-378eb2c0c701n@googlegroups.com> <961e3c3a-a627-4a07-ae81-eb01f7a375a1n@googlegroups.com> <5135a031-a94e-49b9-ab31-a1eb48875ff2n@googlegroups.com> <78475572-3e52-44e4-8116-8f1a917995a4n@googlegroups.com> In-Reply-To: From: "'Russell O'Connor' via Bitcoin Development Mailing List" Date: Thu, 30 Oct 2025 18:23:20 -0400 X-Gm-Features: AWmQ_bmIr37lwNOik4VJMH3n3XiyeT_GCeve2L41iNNuUb01X6q562V5IcDHUZg Message-ID: Subject: [bitcoindev] Re: Policy restrictions Was: [BIP Proposal] Limit ScriptPubkey Size >= 520 Bytes Consensus. To: Greg Maxwell , Bitcoin Development Mailing List , Antoine Poinsot Content-Type: multipart/alternative; boundary="000000000000f91a19064267b221" X-Original-Sender: roconnor@blockstream.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@blockstream.com header.s=google header.b=WhsHYZqY; spf=pass (google.com: domain of roconnor@blockstream.com designates 2607:f8b0:4864:20::536 as permitted sender) smtp.mailfrom=roconnor@blockstream.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=blockstream.com; dara=pass header.i=@googlegroups.com X-Original-From: "Russell O'Connor" Reply-To: "Russell O'Connor" Precedence: list Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com List-ID: X-Google-Group-Id: 786775582512 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Score: -1.0 (-) --000000000000f91a19064267b221 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Fine, I ended up looking into it. PR 5247 changed the semantics of STRICTENC policy in late 2014 so that during a CHECKMULTISIGVERIFY, if a pubkey with an incorrect prefix is encountered, the script fails. The previous behaviour was that if a pubkey was invalid, the check failed for only that pubkey and processing continued on to the next pubkey. I still have to go through my IRC logs, but my recollection is there is at least one person who had their funds "soft confiscated" in the sense that they were now, by policy only, unable to spend their UTXOs and would require bypassing policy to retrieve their funds. People who have better databases than me are welcome to search through bare multisig UTXOs to see if there are any having a strict subset of malformed pubkeys in them. So one minor correction to my story: it wasn't a matter of the pubkey being off-curve, but rather having an invalid prefix / invalid encoding. On Thu, Oct 30, 2025 at 4:27=E2=80=AFPM Russell O'Connor wrote: > On Thu, Oct 30, 2025 at 2:40=E2=80=AFAM Greg Maxwell = wrote: > >> I don't even think bitcoin has ever policy restricted something that was >> in active use, much less softforked out something like that. >> > > I invite the Bitcore lore experts to correct me here, but I recall someon= e > many years ago finding that their bare multisig funds (likely related to > the Counterparty nonsense) were stuck by policy due to some new policy > being enacted to mandate that pubkeys in bare multisigs must now all be > on-curve points ... or something like that. I do hope that they managed = to > get their funds recovered by now with direct miner intervention. > > I really ought to vet my claim above by going through my IRC logs and > Bitcoin development history ... but a quicker way is to post a claim > publicly on the internet and wait for someone else to call it out as bein= g > wrong. > > Also, I think this type of policy change quite harmful and shouldn't be > replicated, and ideally reverted, assuming my story is correct. > --=20 You received this message because you are subscribed to the Google Groups "= Bitcoin Development Mailing List" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to bitcoindev+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/= CAMZUoKmPfbwJApAeYkXs6U9Syuj4KjbcsH3aFJ7desFnHxyyTw%40mail.gmail.com. --000000000000f91a19064267b221 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Fine, I ended up looking into it.

PR 5247 c= hanged the semantics of STRICTENC policy in late 2014 so that during a=C2= =A0CHECKMULTISIGVERIFY, if a pubkey with an incorrect prefix is encountered= , the script fails.=C2=A0 The previous behaviour was that if a pubkey was i= nvalid, the check failed for only that pubkey and processing continued on t= o the next pubkey.

I still have to go through my I= RC logs, but my recollection is there is at least one person who had their = funds "soft confiscated" in the sense that they were now, by poli= cy only, unable to spend their UTXOs and would require bypassing policy to = retrieve their funds.

People who have better datab= ases than me are welcome to search through=C2=A0bare multisig UTXOs to see = if there are any having a strict subset of malformed pubkeys in them.
=

So one minor correction to my story: it wasn't a ma= tter of the pubkey being off-curve, but rather having an invalid prefix / i= nvalid encoding.

=
On Thu, Oct 30, 2025 at 4:27=E2=80=AF= PM Russell O'Connor <roc= onnor@blockstream.com> wrote:
On Thu, Oct 30, 2025 at 2:40=E2=80=AFAM Greg = Maxwell <gmaxwel= l@gmail.com> wrote:
I don't even think bitcoin has ever po= licy restricted something that was in active use, much less softforked=C2= =A0out something like that.

I i= nvite the Bitcore lore experts to correct me here, but I recall someone man= y years ago finding that their bare multisig funds (likely related to the C= ounterparty nonsense) were stuck by policy due to some new policy being ena= cted to mandate that pubkeys in bare multisigs must now all be on-curve poi= nts ... or something like that.=C2=A0 I do hope that they managed to get th= eir funds recovered by now with direct miner intervention.

I really ought to vet my claim above by going through my IRC logs = and Bitcoin development history ... but a quicker way is to post a claim pu= blicly on the internet and wait for someone else to call it out as being wr= ong.

Also, I think this type of policy change quit= e harmful and shouldn't be replicated, and ideally reverted, assuming m= y story is correct.

--
You received this message because you are subscribed to the Google Groups &= quot;Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an e= mail to bitcoind= ev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/ms= gid/bitcoindev/CAMZUoKmPfbwJApAeYkXs6U9Syuj4KjbcsH3aFJ7desFnHxyyTw%40mail.g= mail.com.
--000000000000f91a19064267b221--