Received: from sog-mx-1.v43.ch3.sourceforge.com ([172.29.43.191] helo=mx.sourceforge.net) by sfs-ml-4.v29.ch3.sourceforge.com with esmtp (Exim 4.76) (envelope-from ) id 1YE0gG-00072z-BV for bitcoin-development@lists.sourceforge.net; Wed, 21 Jan 2015 19:11:08 +0000 Received-SPF: pass (sog-mx-1.v43.ch3.sourceforge.com: domain of petertodd.org designates 62.13.148.100 as permitted sender) client-ip=62.13.148.100; envelope-from=pete@petertodd.org; helo=outmail148100.authsmtp.co.uk; Received: from outmail148100.authsmtp.co.uk ([62.13.148.100]) by sog-mx-1.v43.ch3.sourceforge.com with esmtp (Exim 4.76) id 1YE0gE-0004il-Sv for bitcoin-development@lists.sourceforge.net; Wed, 21 Jan 2015 19:11:08 +0000 Received: from mail-c235.authsmtp.com (mail-c235.authsmtp.com [62.13.128.235]) by punt15.authsmtp.com (8.14.2/8.14.2/) with ESMTP id t0LJAxdc008065; Wed, 21 Jan 2015 19:10:59 GMT Received: from muck (205.158.58.41.ptr.us.xo.net [205.158.58.41]) (authenticated bits=128) by mail.authsmtp.com (8.14.2/8.14.2/) with ESMTP id t0LJAsv6025504 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Wed, 21 Jan 2015 19:10:58 GMT Date: Wed, 21 Jan 2015 11:10:53 -0800 From: Peter Todd To: Pieter Wuille , Gregory Maxwell Message-ID: <20150121191053.GB8403@muck> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="MfFXiAuoTsnnDAfZ" Content-Disposition: inline In-Reply-To: X-Server-Quench: 3bc8e894-a1a1-11e4-b396-002590a15da7 X-AuthReport-Spam: If SPAM / abuse - report it at: http://www.authsmtp.com/abuse X-AuthRoute: OCd2Yg0TA1ZNQRgX IjsJECJaVQIpKltL GxAVKBZePFsRUQkR aQdMdAMUElQaAgsB AmMbWl1eUV17XGo7 aQpUcwRYalRLVxtu UVdMSlVNFUssAWB7 d11YVBlwcgBGfDBx Z0JgXj5YDhdyIE50 RlMFFDwHeGZhPWQC AkNRcR5UcAFPdx8U a1UrBXRDAzANdhES HhM4ODE3eDlSNilR RRkIIFQOdA44BTky Wx4FBzZnBVcCXyIo JhgTYmUABkcaLg0e HGFpQlMXNRYOFxdT BCkA X-Authentic-SMTP: 61633532353630.1023:706 X-AuthFastPath: 0 (Was 255) X-AuthSMTP-Origin: 205.158.58.41/587 X-AuthVirus-Status: No virus detected - but ensure you scan with your own anti-virus system. X-Spam-Score: -1.5 (-) X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. -1.5 SPF_CHECK_PASS SPF reports sender host as permitted sender for sender-domain -0.0 SPF_PASS SPF: sender matches SPF record X-Headers-End: 1YE0gE-0004il-Sv Cc: Bitcoin Dev Subject: Re: [Bitcoin-development] [softfork proposal] Strict DER signatures X-BeenThere: bitcoin-development@lists.sourceforge.net X-Mailman-Version: 2.1.9 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Jan 2015 19:11:08 -0000 --MfFXiAuoTsnnDAfZ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jan 20, 2015 at 07:35:49PM -0500, Pieter Wuille wrote: I read this and it's boring, now that all my objections have been met. :) I'll try get a chance to actually test/review this in detail; in SF for the next three weeks with some ugly deadlines and a slow laptop. :( > Hello everyone, >=20 > We've been aware of the risk of depending on OpenSSL for consensus > rules for a while, and were trying to get rid of this as part of BIP > 62 (malleability protection), which was however postponed due to > unforeseen complexities. The recent evens (see the thread titled > "OpenSSL 1.0.0p / 1.0.1k incompatible, causes blockchain rejection." > on this mailing list) have made it clear that the problem is very > real, however, and I would prefer to have a fundamental solution for > it sooner rather than later. >=20 > I therefore propose a softfork to make non-DER signatures illegal > (they've been non-standard since v0.8.0). A draft BIP text can be > found on: >=20 > https://gist.github.com/sipa/5d12c343746dad376c80 >=20 > The document includes motivation and specification. In addition, an > implementation (including unit tests derived from the BIP text) can be > found on: >=20 > https://github.com/sipa/bitcoin/commit/bipstrictder >=20 > Comments/criticisms are very welcome, but I'd prefer keeping the > discussion here on the mailinglist (which is more accessible than on > the gist). --=20 'peter'[:-1]@petertodd.org 00000000000000001a5e1dc75b28e8445c6e8a5c35c76637e33a3e96d487b74c --MfFXiAuoTsnnDAfZ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- iQGrBAEBCACVBQJUv/m5XhSAAAAAABUAQGJsb2NraGFzaEBiaXRjb2luLm9yZzAw MDAwMDAwMDAwMDAwMDAxYTVlMWRjNzViMjhlODQ0NWM2ZThhNWMzNWM3NjYzN2Uz M2EzZTk2ZDQ4N2I3NGMvFIAAAAAAFQARcGthLWFkZHJlc3NAZ251cGcub3JncGV0 ZUBwZXRlcnRvZC5vcmcACgkQJIFAPaXwkftiugf/fygWZX5wBNxszjOr40xVUmTw IHQw4OBEi22+TUScnQr0JxlUCYyRnEFcHKPzH6vbIuZlfcwfV9KRFbc4RIXUAMYs +V0xEKsnzgxZnnO0uEo5fcuzzsmPOl/5KCVzFPuXwTSTkTSpUvykggUEIwtgmZh0 +ifipT2jsEhDTs79j3ux6tA1B6lsDF+C4lnvDjUnYPlIxg8CdTTKJF4DZzKQXx0y 70s2mgBakxxN2MLc74+3CCAEf1DYjR3ydGvPp4Cev3AitvYFXXdCI4h/omiXFLNc GL3UhUW1pOHmcQY+pEim7RY5HQfLf+y9hpGJWmsPqk8E72DBwvdrdgis4gE95Q== =/7Jp -----END PGP SIGNATURE----- --MfFXiAuoTsnnDAfZ--