From bastien at acinq.fr Tue Dec 17 16:01:01 2019 From: bastien at acinq.fr (Bastien TEINTURIER) Date: Tue, 17 Dec 2019 17:01:01 +0100 Subject: [Lightning-dev] Pay-to-Open and UX improvements In-Reply-To: <3GiEjMd49K1cZukcBKrRpZE4xa0-GQ4andCz_4MIO3WHIjSdDEdPrOTwez7hJwHgHM9NUHzXaWoSGPd6m_71xoLJvZUEw1Cllcm6TfFb5Yo=@protonmail.com> References: <20191217144346.erlikoqqllxu4irx@ganymede> <3GiEjMd49K1cZukcBKrRpZE4xa0-GQ4andCz_4MIO3WHIjSdDEdPrOTwez7hJwHgHM9NUHzXaWoSGPd6m_71xoLJvZUEw1Cllcm6TfFb5Yo=@protonmail.com> Message-ID: Thanks a lot David for the suggestion and pointers, that's a really interesting solution. I will dive into that in-depth, it could be very useful for many layer-2 constructions. Thanks ZmnSCPxj as well for the quick feedback and the `OP_CAT` construction, a lot of cool tricks coming up once (if?) we have such tools in the future ;) Le mar. 17 d?c. 2019 ? 16:14, ZmnSCPxj a ?crit : > Good morning David, t-bast, and all, > > > > I'm not aware of any way to currently force single-show signatures in > > Bitcoin, so this is pretty theoretical. Also, single-show signatures > > add a lot of fragility to any setup and make useful features like RBF > > fee bumping unavailable. > > With `OP_CAT`, we can enforce that a particular `R` is used, which allows > to implement single-show signatures. > > # Assuming signatures are the concatenation of (R,s) > OP_SWAP OP_CAT OP_CHECKSIG > > The above would then feed `s` only on the witness stack. > > Regards, > ZmnSCPxj > -------------- next part -------------- An HTML attachment was scrubbed... URL: