Delivery-date: Mon, 09 Dec 2024 05:37:41 -0800
Sender: bitcoindev@googlegroups.com
Date: Mon, 9 Dec 2024 05:27:54 -0800 (PST)
From: Weikeng Chen <weikeng.chen@l2iterative.com>
To: Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
Message-Id: <ebd77d82-96ab-4530-909a-d085378b9868n@googlegroups.com>
Subject: [bitcoindev] Difficulty in emulating "weaker" OP_SUCCESS and why it
 should be a real opcode
MIME-Version: 1.0
Content-Type: multipart/mixed; 
	boundary="----=_Part_219826_310777324.1733750874600"
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com

------=_Part_219826_310777324.1733750874600
Content-Type: multipart/alternative; 
	boundary="----=_Part_219827_1494883412.1733750874600"

------=_Part_219827_1494883412.1733750874600
Content-Type: text/plain; charset="UTF-8"

When I am implementing fraud proofs in Bitcoin script, I find it useful to 
have an opcode "OP_SUCCESS" that will mark the execution to be successful 
without running the rest of the script, if this opcode is being executed. 
This is useful for writing code for fraud proofs such as BitVM, where the 
verifier wins if it finds one mismatch, and the verifier does not need to 
show the other mismatches.

This OP_SUCCESS is weaker version of the OP_SUCCESSx in the Taproot 
upgrade, which marks the execution as successful for the mere presence of 
OP_SUCCESSx anywhere in the script. Rusty Russell in a 2023 article, 
"Covenants: Examining ScriptPubkeys in Bitcoin Script", also mentioned 
about the usefulness of such an opcode. 

Of course, this opcode can be emulated, and one can rewrite the existing 
script in a way to realize the same functionality without adding a new 
opcode to Bitcoin.

The problem is that such rewriting is indeed fairly complicated. For 
example, say that we have the following program.

```
OP_NOP1
OP_IF
    OP_NOP2
    OP_IF_SUCCESS
    OP_NOP3
    OP_IF_SUCCESS
    OP_NOP4
    OP_IF_SUCCESS
    OP_NOP5
OP_ENDIF
OP_NOP6
```
with OP_IF_SUCCESS short for "OP_IF OP_SUCCESS OP_ENDIF"

The equivalent version without using new opcode is as follows (generated by 
computer, using a rewriting tool: 
https://github.com/Bitcoin-Wildlife-Sanctuary/fraud-proof-compiler)

```
OP_NOP1
OP_IF
    OP_NOP2
    OP_IF
        1
        0
    OP_ELSE
        OP_NOP3
        OP_IF
            1
            0
        OP_ELSE
            OP_NOP4
            OP_IF
                1
            OP_ELSE
                OP_NOP5
                0
                0
                0
            OP_ENDIF
        OP_ENDIF
        OP_IF 1 OP_ENDIF
    OP_ENDIF
    OP_IF 1 OP_ENDIF
OP_ELSE
    0
OP_ENDIF
OP_IF
    1
OP_ELSE
    OP_NOP6
    0
OP_ENDIF
OP_IF
    OP_DEPTH 512 OP_GREATERTHANOREQUAL OP_IF
        OP_2DROP ... OP_2DROP (256 OP_2DROP)
    OP_ENDIF
    OP_DEPTH 256 OP_GREATERTHANOREQUAL OP_IF
        OP_2DROP ... OP_2DROP (128 OP_2DROP)
    OP_ENDIF
    OP_DEPTH 128 OP_GREATERTHANOREQUAL OP_IF
        OP_2DROP ... OP_2DROP (64 OP_2DROP)
    OP_ENDIF
    OP_DEPTH 64 OP_GREATERTHANOREQUAL OP_IF
        OP_2DROP ... OP_2DROP (32 OP_2DROP)
    OP_ENDIF
    OP_DEPTH 32 OP_GREATERTHANOREQUAL OP_IF
        OP_2DROP ... OP_2DROP (16 OP_2DROP)
    OP_ENDIF
    OP_DEPTH 16 OP_GREATERTHANOREQUAL OP_IF
        OP_2DROP ... OP_2DROP (8 OP_2DROP)
    OP_ENDIF
    OP_DEPTH 8 OP_GREATERTHANOREQUAL OP_IF
        OP_2DROP ... OP_2DROP (4 OP_2DROP)
    OP_ENDIF
    OP_DEPTH 4 OP_GREATERTHANOREQUAL OP_IF
        OP_2DROP ... OP_2DROP (2 OP_2DROP)
    OP_ENDIF
    OP_DEPTH 2 OP_GREATERTHANOREQUAL OP_IF
        OP_2DROP
    OP_ENDIF
    OP_DEPTH OP_IF
        OP_DROP
    OP_ENDIF
    OP_TRUE
OP_ENDIF
```

The second part of the code is mainly a general-purpose and 
stack-size-independent method to remove all the stack elements in order to 
be standard. 

For this reason, it seems better to avoid the need for developers to 
"emulate" such a weak version of OP_SUCCESS but to actually implement an 
opcode for that.

What do you think?

-- 
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/ebd77d82-96ab-4530-909a-d085378b9868n%40googlegroups.com.

------=_Part_219827_1494883412.1733750874600
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

When I am implementing fraud proofs in Bitcoin script, I find it useful to =
have an opcode "OP_SUCCESS" that will mark the execution to be successful w=
ithout running the rest of the script, if this opcode is being executed. Th=
is is useful for writing code for fraud proofs such as BitVM, where the ver=
ifier wins if it finds one mismatch, and the verifier does not need to show=
 the other mismatches.<div><br /></div><div>This OP_SUCCESS is weaker versi=
on of the OP_SUCCESSx in the Taproot upgrade, which marks the execution as =
successful for the mere presence of OP_SUCCESSx anywhere in the script.=C2=
=A0Rusty Russell in a 2023 article, "Covenants: Examining ScriptPubkeys in =
Bitcoin Script", also mentioned about the usefulness of such an opcode.=C2=
=A0</div><div><br /></div><div>Of course, this opcode can be emulated, and =
one can rewrite the existing script in a way to realize the same functional=
ity without adding a new opcode to Bitcoin.</div><div><br /></div><div>The =
problem is that such rewriting is indeed fairly complicated. For example, s=
ay that we have the following program.</div><div><br /></div><div>```<br />=
OP_NOP1<br />OP_IF<br />=C2=A0 =C2=A0 OP_NOP2<br />=C2=A0 =C2=A0=C2=A0OP_IF=
_SUCCESS<br />=C2=A0 =C2=A0=C2=A0OP_NOP3<br />=C2=A0 =C2=A0=C2=A0OP_IF_SUCC=
ESS<br />=C2=A0 =C2=A0=C2=A0OP_NOP4<br />=C2=A0 =C2=A0=C2=A0OP_IF_SUCCESS<b=
r />=C2=A0 =C2=A0=C2=A0OP_NOP5<br />OP_ENDIF<br />OP_NOP6<br />```</div><di=
v>with OP_IF_SUCCESS short for "OP_IF OP_SUCCESS OP_ENDIF"</div><div><br />=
</div><div>The equivalent version without using new opcode is as follows (g=
enerated by computer, using a rewriting tool: https://github.com/Bitcoin-Wi=
ldlife-Sanctuary/fraud-proof-compiler)</div><div><br /></div><div>```</div>=
<div>OP_NOP1<br />OP_IF<br />=C2=A0 =C2=A0 OP_NOP2<br />=C2=A0 =C2=A0 OP_IF=
<br />=C2=A0 =C2=A0 =C2=A0 =C2=A0 1</div><div>=C2=A0 =C2=A0=C2=A0=C2=A0 =C2=
=A0=C2=A00</div><div>=C2=A0 =C2=A0 OP_ELSE<br />=C2=A0 =C2=A0=C2=A0=C2=A0 =
=C2=A0=C2=A0OP_NOP3</div><div>=C2=A0 =C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0OP_IF</=
div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 1</div><div>=C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 0</div><div>=C2=A0 =C2=A0=C2=A0=C2=A0 =C2=
=A0=C2=A0OP_ELSE</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0=C2=A0 =C2=A0=
=C2=A0OP_NOP4</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0 =C2=A0=C2=A0=C2=
=A0OP_IF</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0=C2=A0 =
=C2=A0=C2=A01</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0=C2=A0 =C2=A0=C2=
=A0OP_ELSE</div><div>=C2=A0 =C2=A0=C2=A0=C2=A0 =C2=A0 =C2=A0 =C2=A0=C2=A0=
=C2=A0 =C2=A0=C2=A0OP_NOP5</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0=C2=A0=C2=A0 =C2=A0=C2=A00</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A00</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0=C2=A0 =C2=A0=C2=A0=C2=A00</div><div>=C2=A0 =C2=A0 =C2=A0 =C2=A0=
=C2=A0=C2=A0 =C2=A0=C2=A0OP_ENDIF</div><div>=C2=A0 =C2=A0=C2=A0=C2=A0 =C2=
=A0=C2=A0OP_ENDIF</div><div>=C2=A0 =C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0OP_IF 1 O=
P_ENDIF</div><div>=C2=A0 =C2=A0 OP_ENDIF<br />=C2=A0 =C2=A0=C2=A0OP_IF 1 OP=
_ENDIF<br />OP_ELSE<br />=C2=A0 =C2=A0=C2=A00<br />OP_ENDIF<br />OP_IF<br /=
>=C2=A0 =C2=A0=C2=A01<br />OP_ELSE<br />=C2=A0 =C2=A0=C2=A0OP_NOP6<br />=C2=
=A0 =C2=A0=C2=A00<br />OP_ENDIF<br />OP_IF</div><div>=C2=A0 =C2=A0 OP_DEPTH=
 512 OP_GREATERTHANOREQUAL OP_IF<br />=C2=A0 =C2=A0 =C2=A0 =C2=A0 OP_2DROP =
... OP_2DROP (256 OP_2DROP)</div><div>=C2=A0 =C2=A0 OP_ENDIF<br />=C2=A0 =
=C2=A0 OP_DEPTH 256 OP_GREATERTHANOREQUAL OP_IF<br />=C2=A0 =C2=A0 =C2=A0 =
=C2=A0 OP_2DROP ... OP_2DROP (128 OP_2DROP)</div><div>=C2=A0 =C2=A0 OP_ENDI=
F<br />=C2=A0 =C2=A0 OP_DEPTH 128 OP_GREATERTHANOREQUAL OP_IF<br />=C2=A0 =
=C2=A0 =C2=A0 =C2=A0 OP_2DROP ... OP_2DROP (64 OP_2DROP)</div><div>=C2=A0 =
=C2=A0 OP_ENDIF<br />=C2=A0 =C2=A0 OP_DEPTH 64 OP_GREATERTHANOREQUAL OP_IF<=
br />=C2=A0 =C2=A0 =C2=A0 =C2=A0 OP_2DROP ... OP_2DROP (32 OP_2DROP)</div><=
div>=C2=A0 =C2=A0 OP_ENDIF<br />=C2=A0 =C2=A0 OP_DEPTH 32 OP_GREATERTHANORE=
QUAL OP_IF<br />=C2=A0 =C2=A0 =C2=A0 =C2=A0 OP_2DROP ... OP_2DROP (16 OP_2D=
ROP)</div><div>=C2=A0 =C2=A0 OP_ENDIF<br />=C2=A0 =C2=A0 OP_DEPTH 16 OP_GRE=
ATERTHANOREQUAL OP_IF<br />=C2=A0 =C2=A0 =C2=A0 =C2=A0 OP_2DROP ... OP_2DRO=
P (8 OP_2DROP)</div><div>=C2=A0 =C2=A0 OP_ENDIF<br />=C2=A0 =C2=A0 OP_DEPTH=
 8 OP_GREATERTHANOREQUAL OP_IF<br />=C2=A0 =C2=A0 =C2=A0 =C2=A0 OP_2DROP ..=
. OP_2DROP (4 OP_2DROP)</div><div>=C2=A0 =C2=A0 OP_ENDIF<br />=C2=A0 =C2=A0=
 OP_DEPTH 4 OP_GREATERTHANOREQUAL OP_IF<br />=C2=A0 =C2=A0 =C2=A0 =C2=A0 OP=
_2DROP ... OP_2DROP (2 OP_2DROP)</div><div>=C2=A0 =C2=A0 OP_ENDIF<br />=C2=
=A0 =C2=A0 OP_DEPTH 2 OP_GREATERTHANOREQUAL OP_IF</div><div>=C2=A0 =C2=A0 =
=C2=A0 =C2=A0 OP_2DROP</div><div>=C2=A0 =C2=A0 OP_ENDIF<br />=C2=A0 =C2=A0 =
OP_DEPTH OP_IF<br />=C2=A0 =C2=A0 =C2=A0 =C2=A0 OP_DROP</div><div>=C2=A0 =
=C2=A0 OP_ENDIF</div><div>=C2=A0 =C2=A0 OP_TRUE</div><div>OP_ENDIF</div><di=
v>```</div><div><br /></div><div>The second part of the code is mainly a ge=
neral-purpose and stack-size-independent method to remove all the stack ele=
ments in order to be standard.=C2=A0</div><div><br /></div><div>For this re=
ason, it seems better to avoid the need for developers to "emulate" such a =
weak version of OP_SUCCESS but to actually implement an opcode for that.</d=
iv><div><br /></div><div>What do you think?</div><div><br /></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Bitcoin Development Mailing List&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:bitcoindev+unsubscribe@googlegroups.com">bitcoind=
ev+unsubscribe@googlegroups.com</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/d/msgid/=
bitcoindev/ebd77d82-96ab-4530-909a-d085378b9868n%40googlegroups.com?utm_med=
ium=3Demail&utm_source=3Dfooter">https://groups.google.com/d/msgid/bitcoind=
ev/ebd77d82-96ab-4530-909a-d085378b9868n%40googlegroups.com</a>.<br />

------=_Part_219827_1494883412.1733750874600--

------=_Part_219826_310777324.1733750874600--