Delivery-date: Thu, 09 May 2024 05:49:11 -0700
Sender: bitcoindev@googlegroups.com
Received-SPF: pass (google.com: domain of apoelstra@wpsoftware.net designates 66.183.0.205 as permitted sender) client-ip=66.183.0.205;
Date: Thu, 9 May 2024 12:46:46 +0000
From: Andrew Poelstra <apoelstra@wpsoftware.net>
To: Ben Carman <benthecarman1@gmail.com>
Cc: Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
Subject: Re: [bitcoindev] Signing a Bitcoin Transaction with Lamport
 Signatures (no changes needed)
Message-ID: <ZjzFtus_aBchwKz2@camus>
References: <CAEM=y+XyW8wNOekw13C5jDMzQ-dOJpQrBC+qR8-uDot25tM=XA@mail.gmail.com>
 <CA+x5asTOTai_4yNGEgtKEqAchuWJ0jGDEgMqHFYDwactPnrgyw@mail.gmail.com>
 <ZjD-dMMGxoGNgzIg@camus>
 <b50b6b09-4d13-46ab-9776-f6b8a02aa2e0n@googlegroups.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="PqFz6drlulNCXWIQ"
Content-Disposition: inline
In-Reply-To: <b50b6b09-4d13-46ab-9776-f6b8a02aa2e0n@googlegroups.com>
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com


--PqFz6drlulNCXWIQ
Content-Type: text/plain; charset="UTF-8"
Content-Disposition: inline

On Wed, May 08, 2024 at 05:31:18PM -0700, Ben Carman wrote:
> I think it is possible to get past the 201 op code limit doing it in 
> tapscript. I don't think it would have the same quantum security but could 
> maybe be a path to covenants. My understanding is that you're using the 
> OP_SIZE of the sig to basically decide to verify if the bit is a 0 or a 1, 
> then do that verification. You could do the same trick with schnorr sigs, 
> just for 0 bits don't include the sighash_all flag, and for 1 bits include 
> it. This would allow you to get around all the resource limits that taproot 
> lifted. This still should be safe since the the signature commits to if it 
> is SIGHASH_DEFAULT vs SIGHASH_ALL. I am not sure if this will enable very 
> complex things or just let you do it on 1 bit of information in tapscript.
>

If I'm understanding you right, then what you're signing is your choice
of sighash flags, rather than anything inherent to the transaction. So I
don't think this works.

-- 
Andrew Poelstra
Director, Blockstream Research
Email: apoelstra at wpsoftware.net
Web:   https://www.wpsoftware.net/andrew

The sun is always shining in space
    -Justin Lewis-Webster

-- 
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bitcoindev/ZjzFtus_aBchwKz2%40camus.

--PqFz6drlulNCXWIQ
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEkPnKPD7Je+ki35VexYjWPOQbl8EFAmY8xbUACgkQxYjWPOQb
l8Ek7wf/QC7Qd3G/HE3uFV2sYR2KTKgnRCwV16eeMRiZm4R85dr7q2rMmsaIuoBO
SgeaZCxeEgfOSLNh6JrA18rmxCddO7eqKbWcyOlIVAoAR/oQtSNeD+jV2m07saJO
z++kB3aAcNMRgqwz6NrvSwahHQsXmFQmK8Txc5xQH23vd+qqYNngCamc4LRv3gDd
N9QbPzTA6xXyjJxQi53UESUEqcmS/xSckLnwzLNWj6tCQlLiWyGEcE5L4ZDVRGuU
L9LvkyX//1lV1Lm4eDSA/vPRA0Y68meZGjCDLpvXlmPzNsQDdnG8b+/289viEXuI
UfpZKRHsfwSAe24p9/XfKM3QiXMfhA==
=mi+d
-----END PGP SIGNATURE-----

--PqFz6drlulNCXWIQ--