From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Thu, 08 Jan 2026 10:19:58 -0800 Received: from mail-oa1-f59.google.com ([209.85.160.59]) by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1vduc2-0001Gm-3P for bitcoindev@gnusha.org; Thu, 08 Jan 2026 10:19:58 -0800 Received: by mail-oa1-f59.google.com with SMTP id 586e51a60fabf-3ec76ed3bb2sf415784fac.2 for ; Thu, 08 Jan 2026 10:19:57 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1767896392; cv=pass; d=google.com; s=arc-20240605; b=TISEzAvzpaVJI4Y2mL656QCbQsbo+v1IXfghVplhOEaoHKlWGIUBh8276RcEMd8Ne0 UUqylNMDzYD7GVz+zl5XmiUknEncHTbOPofb2emKDlHtFTUK86LKX4vnX79jXM3Oq7Ba gFkbg8q+krVo68aHXIf9hwXBKJSvjmV5lXjIstb9Yiwz5nj6RzWjSQvYwG4l18uLRktk zmVDcwOYjNvUhxdkL9JIJ+b7r5oRKi0BZVlrRCtOkj8LOOuVGwJwDzVx+OmUh2KCUvmp Zz3OicuSD8OphsfGsnpXeTh766sYNct59bVf94+9Dc71O6mdxTOw9vKHE28yfpqwdc4K gH7g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:in-reply-to:from:content-language :references:cc:to:subject:mime-version:date:message-id:sender :dkim-signature; bh=9oGzeVr1efOdNtIxaUUUw6ymGpn1wVqeTZ/afjBNBZ4=; fh=sWaz/WtSo8pwxASu8z/mwNKiM5HhhuDmXsBi91pL/0A=; b=BlNMUhrnIS7IllCgiyYA1sjEW9UgXIqpWMbqAWwsUqVEUSkxsLyu4HWtj9dss//tuq /NwgXShvQxBcTn4cNMp2xfJXb2AAfnP4zXB+vXgej3jYnRWQTe6glTB0sSlrVOnxrGp3 pM4b8i6QqcgfYala6eCK0RIYPhQ2cPpM29FmtMdxpstvv721VUgyz9xNXm0RjGlGD8gC U/YZ8051TzChbFoay6d8dB5DyXl6DR9p9iOq1nNInJLEkvsYsU5i3euCBZHY8+4Kd5nz 7RYWkVrUEtkn0BAQn0+P8XvTJdU2yAegFZSud3TVg/VeAiQTJ/zZwvPH000KPJC/G2Ls 8Cwg==; darn=gnusha.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@mattcorallo.com header.s=1767889262 header.b=iCHiZQMi; dkim=pass header.i=@clients.mail.as397444.net header.s=1767889265 header.b=TzQrYzXH; spf=pass (google.com: domain of lf-lists@mattcorallo.com designates 69.59.18.99 as permitted sender) smtp.mailfrom=lf-lists@mattcorallo.com; dmarc=pass (p=NONE sp=REJECT dis=NONE) header.from=mattcorallo.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1767896392; x=1768501192; darn=gnusha.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:in-reply-to:from:content-language:references:cc :to:subject:mime-version:date:message-id:sender:from:to:cc:subject :date:message-id:reply-to; bh=9oGzeVr1efOdNtIxaUUUw6ymGpn1wVqeTZ/afjBNBZ4=; b=e8GYdLLdon/jzg83teRciEMAzeOyFYMHHGF7UwfCqQ6KF9tjGFpa3CWztKhBwok8PM /z3M0/SMrupXq7z1Aa0waeBFyfyXff8mbPWZeabod9wzSKXNiWsmzOs+aOVwaGZjvglL FVJYKcb/ruA1KhI8Ml1yLyqQyRe/7zpsBPIwX20MmgJ06KPxt7OgJ/xLfHhtd4WxCwHt sSu11OuBx7mVQO7BGKqJ4f8W5UvHFYX12aqG1RXeoT+hHfFAXSCH5NZuL5GQr7nVbG3W v9zdPxNACuw6J+Op3VYW6Uz1kFO3bibVQS3NpW8HbuCvZ3xQJA6o073Jve4yon/CEu7h hkug== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1767896392; x=1768501192; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:in-reply-to:from:content-language:references:cc :to:subject:mime-version:date:message-id:x-beenthere :x-gm-message-state:sender:from:to:cc:subject:date:message-id :reply-to; bh=9oGzeVr1efOdNtIxaUUUw6ymGpn1wVqeTZ/afjBNBZ4=; b=FtFsEvWD1p2IAXGpSJ3a9qg7XFj0zJO4MaYwgNh4DvoAQiuXeBeEFCMqMDEwt6OsVf Nl93NKhg6ZUY0JPoYl9cohiEuLcuH/ozp2MTN8mHiqukmKsqNymZWlUIyy2oxTZv/Mt9 8/l81llHvYIm7EwYKdCCqcTr3/1rMSdJH+R7BgOd2067xmotMokrAr5kKVu77HJXJ/cT RBgT8pHCKnNhKPfy63MCEeKvGbJ3BZkarab7mcvR7me/dI979zZkx5Fy/LblID0T6qSP Y9WJlG3DPvPvkGHKrPO864q7p+zLGmSlGHX1ee4Qer2CQdKzm8x5ZF2xBjqeKSmX1S7w 0xcg== Sender: bitcoindev@googlegroups.com X-Forwarded-Encrypted: i=2; AJvYcCU4DVBzoVhIHGGlTQbrbVeKvkh6G4+ZmDlk1YW4wwggKCSKd1WeSYeuasaONqSc9rNWO3m5BnZyUAXf@gnusha.org X-Gm-Message-State: AOJu0Yz7iDCmSJil+91iJHNYKxg4+zVMq5WOJlnk2kOXHYNAzSWLdoSZ tRBmEYZNIW5k0EfWZOQA6PjSfCLTAGYuwqe7ENj7nAvuc5ZsiyboIbPG X-Google-Smtp-Source: AGHT+IHIlLNLsLwZNGPj12t56+QiOQHWfOhjCJiJcp102GoojK0+kd1sEXzQ7FL7SKvKPkV3o2hBCw== X-Received: by 2002:a05:6870:9721:b0:3ec:44cf:e8e2 with SMTP id 586e51a60fabf-3ffc08e51bcmr2699405fac.1.1767896391866; Thu, 08 Jan 2026 10:19:51 -0800 (PST) X-BeenThere: bitcoindev@googlegroups.com; h="AWVwgWZp0OR3AYntvClk9x0d5+BfYvZzCg6RRa8G1Y0U+/d8DA==" Received: by 2002:a05:6870:d681:b0:3f5:cf8c:7f65 with SMTP id 586e51a60fabf-3ffc023afb2ls668001fac.2.-pod-prod-00-us-canary; Thu, 08 Jan 2026 10:19:47 -0800 (PST) X-Received: by 2002:a05:6808:2f0e:b0:450:b87b:1ec4 with SMTP id 5614622812f47-45a6b7925f5mr3045773b6e.15.1767896387511; Thu, 08 Jan 2026 10:19:47 -0800 (PST) Received: by 2002:a05:6808:4a59:20b0:44f:fe66:38a2 with SMTP id 5614622812f47-457b2896d33msb6e; Thu, 8 Jan 2026 08:40:42 -0800 (PST) X-Received: by 2002:a05:6a00:6088:b0:7ad:1907:5756 with SMTP id d2e1a72fcca58-81b7694549cmr7037299b3a.12.1767890441161; Thu, 08 Jan 2026 08:40:41 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1767890441; cv=none; d=google.com; s=arc-20240605; b=IASgaXqwHQPYxIjXuAVgmzJ1/DyaKku9COJE21OI3cmmEiOfLfz65WFBx7dBJr3AZn Of9RJPt+0GGodbON7jjsPX50wjZUw9WZVrGhIL/WaPoCiybq1pJkjJrzt5VyMPMHhhiB YLd7g7K7q/+2iQwZ+rBwz0PKI9xjbGjHvaYqvR5oYlEQ6E51X7Iko3RBe7SQeSRCF1ZZ mMXiTpcXlFKmawJGE9R6pd9RFTjdvX2dGZ2Vkj8Xb+5QdmxC4P0eC/uCYf7tfZyzaM8X 3GDafQ5ygRjxzU1jGW5lz+5RQl1mXeXFA4vPzq3VlT1tuzXX0Pz+OQEuOYkiTimYUgkF cc8g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:mime-version:date:message-id :dkim-signature:dkim-signature; bh=y97waOJ3e0R8IPI5lOZBAE3nZx43R6vcAKJe8j91Qro=; fh=eIAf69PAcuxoniiYNg0EwnK1wa22u01kpHv8GcVL1I8=; b=f5eLajbWWtkEtwjwULGu2HoNnczwtCAN7aD4cgKe1uKSNfxv65DFfHIohF4+WlCnqo BawqDgFn2cps61AaO6CE0p5VgzBw0hZ+y/9raA0vKLeWOEL5JKY0tzxrAGrRMVixPdNg TtYe3iXOwZuzkhlH6D4alrNnltsev5ktvcvcFoMx0KSSuSv7fI+CDWscRhsU6YNVhWdf sZCZnOHWXCJS6GcmRMB+4JOIBdUTkvYNvLS3ZVd9MpCzbRZoYmbHdFf+/nleMRNczwCv qHdoD28texcqLqLmqX169nvsnWuDlTWSpMWy/06lYO9JB5wLLkEfyRD+o9XjIGZ1neb2 SW1g==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@mattcorallo.com header.s=1767889262 header.b=iCHiZQMi; dkim=pass header.i=@clients.mail.as397444.net header.s=1767889265 header.b=TzQrYzXH; spf=pass (google.com: domain of lf-lists@mattcorallo.com designates 69.59.18.99 as permitted sender) smtp.mailfrom=lf-lists@mattcorallo.com; dmarc=pass (p=NONE sp=REJECT dis=NONE) header.from=mattcorallo.com Received: from mail.as397444.net (mail.as397444.net. [69.59.18.99]) by gmr-mx.google.com with ESMTPS id d2e1a72fcca58-81a37a63439si219274b3a.5.2026.01.08.08.40.41 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 08 Jan 2026 08:40:41 -0800 (PST) Received-SPF: pass (google.com: domain of lf-lists@mattcorallo.com designates 69.59.18.99 as permitted sender) client-ip=69.59.18.99; X-DKIM-Note: Keys used to sign are likely public at X-DKIM-Note: https://as397444.net/dkim/mattcorallo.com and X-DKIM-Note: https://as397444.net/dkim/clients.mail.as397444.net X-DKIM-Note: For more info, see https://as397444.net/dkim/ Received: by mail.as397444.net with esmtpsa (TLS1.3) (Exim) (envelope-from ) id 1vdt3v-00000001uYh-3H4m; Thu, 08 Jan 2026 16:40:40 +0000 Message-ID: Date: Thu, 8 Jan 2026 11:40:39 -0500 MIME-Version: 1.0 Subject: Re: [bitcoindev] Addressing remaining points on BIP 54 To: Sjors Provoost , Antoine Riard Cc: Bitcoin Development Mailing List , Antoine Poinsot References: <05f5b0ee-b487-4733-9860-ac0705b6b901n@googlegroups.com> <9C946151-D6DD-4CB7-B524-15FD9F625D9D@sprovoost.nl> Content-Language: en-US From: Matt Corallo In-Reply-To: <9C946151-D6DD-4CB7-B524-15FD9F625D9D@sprovoost.nl> Content-Type: text/plain; charset="UTF-8"; format=flowed X-Original-Sender: lf-lists@mattcorallo.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@mattcorallo.com header.s=1767889262 header.b=iCHiZQMi; dkim=pass header.i=@clients.mail.as397444.net header.s=1767889265 header.b=TzQrYzXH; spf=pass (google.com: domain of lf-lists@mattcorallo.com designates 69.59.18.99 as permitted sender) smtp.mailfrom=lf-lists@mattcorallo.com; dmarc=pass (p=NONE sp=REJECT dis=NONE) header.from=mattcorallo.com Precedence: list Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com List-ID: X-Google-Group-Id: 786775582512 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Score: -0.8 (/) On 1/8/26 3:30 AM, Sjors Provoost wrote: > Hello Riard, > >> Thanks for the update. If I'm understanding correctly Luke's concern, >> currently the coinbase's scriptSig is used to store an extranonce. One >> has to observe first there is no consensus limit on the size of a >> transaction, which holds for the coinbase tx too, a fortiori there is >> no limit on the extranonce size a miner could fit in the scriptSig. > > > The coinbase scriptSig is limited to 100 bytes [0]. Some speculation as to > why [1]. > > The main issue I see is complexity of implementation. The nLockTime is always > the last 4 bytes of a transaction, so an ASIC can roll it without having to > understand anything about serialisation. > > The scriptSig OTOH is variable length, so it needs to read the length byte in > order to figure out which 4 bytes are at the end. The pool or proxy then also > needs to ensure those 4 bytes are pre-initialised*. > > The approach suggested by Towns [4] of appending a 0-sat OP_RETURN output with > padding so a 4-byte nonce lands in the final 64-byte SHA256 chunk is probably > better, but not because like nLockTime it has a small hashing midstate > benefit. It's easier to implement. > > Compared to varying the end of the scriptSig, this can be easier for an ASIC > because it can update a fixed 4-byte field at a known offset from the end, > rather than having to parse variable-length fields (notably the scriptSig > length) to locate the bytes to roll. > > I think that extra complexity is doable and justifiable, but I've never built an ASIC. > > Note that today Stratum v1 simply splits the scriptSig [5] into two parts, as does > Stratum v2 [3], but presumably that's all done by the control board and it makes > sense to want to push rolling functionally into the ASIC silicon, where even > simple concatenation might be too involved - but updating bytes at known > positions is easy. > >> The point being made is that the nLocktime field of the coinbase >> transaction could be used as a more efficient extra nonce due to >> the positional location of nLocktime in a serialized coinbase being >> one of the latest message block to be processed [0]. >> >> Nothing prevent a miner in already doing this and draw a speed advantage >> from the diminished computational work. I have not looked into CGminer code >> or one of its derivative forks, if there is an implemented option to do that, >> but yes there could be non-published existing mining firmware doing it. IIUC, >> BIP54 would nullify this theoretical "speed advantage" for all miners. > > I don't think there's currently a speed advantage, so I wouldn't expect to observe > this behaviour in the wild just yet. The combination of rolling nVersion > (BIP310) [2] and updating nTime every second, works fine up to 280 TH/s. > > Beyond that an ASIC will need to touch the coinbase. Oops, missed this part. Honestly we should just reserve another 8 bits out of the version for rolling. 8 bits for signaling is more than enough, and 72PH/2 aught to be enough for a relatively large ASIC for quite a while :). Then this entire rolling discussion nearly entirely goes away. -- You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group. To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/f68d7c20-5119-4159-8e42-f7c10597a789%40mattcorallo.com.