MIME-Version: 1.0
From: Erik Aronesty <erik@q32.com>
Date: Fri, 3 Jun 2022 10:31:19 -0400
Message-ID: <CAJowKgJufpqULUAnqiaXC4G9wGUUXL5Lwjo+DHjv1HyGksG-gA@mail.gmail.com>
To: Bitcoin Protocol Discussion <bitcoin-dev@lists.linuxfoundation.org>
Content-Type: multipart/alternative; boundary="000000000000721a8e05e08bfa1f"
Subject: [bitcoin-dev] signature abstraction
Precedence: list

--000000000000721a8e05e08bfa1f
Content-Type: text/plain; charset="UTF-8"

was thinking it might be possible to create a protocol for signatures where
some bounded elliptic curve parameters are in the script, allowing the
efficient verification of a broad range of elliptic curves schnorr
signatures... rather than a fixed curve

has anyone proposed this sort of thing before?

seems like it could allow higher bitness, broad hsm compatibility, and a
"decentralization and competitiveness" of security parameters for different
environments

would be useful to me, but not sure how many people care about this

--000000000000721a8e05e08bfa1f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">was thinking it might be possible to create a protocol for=
 signatures where some bounded elliptic curve parameters are in the script,=
 allowing the efficient verification of a broad range of elliptic curves sc=
hnorr signatures... rather than a fixed curve<br><br>has anyone proposed th=
is sort of thing before?<div><br></div><div>seems like it could allow highe=
r bitness, broad hsm compatibility, and a &quot;decentralization and compet=
itiveness&quot; of security parameters for different environments</div><div=
><br></div><div>would be useful to me, but not sure how many people care ab=
out this</div><div><br></div></div>

--000000000000721a8e05e08bfa1f--