Author: Johnson Lau 2016-08-16 10:10:01
Published on: 2016-08-16T10:10:01+00:00
A new Bitcoin Improvement Proposal (BIP) has been proposed to make low S value signatures a consensus rule. The proposal aims to restrict signatures to using low S values. ECDSA signatures are malleable, taking the negative of the number S inside does not invalidate it. To fix this malleability, the value S in signatures must be between 0x1 and 0x7FFFFFFFFFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 5D576E73 57A4501D DFE92F46 681B20A0 (inclusive). Every signature passed to OP_CHECKSIG, OP_CHECKSIGVERIFY, OP_CHECKMULTISIG, or OP_CHECKMULTISIGVERIFY, to which ECDSA verification is applied, must use an S value between these limits with strict DER encoding. The BIP will be deployed by "version bits" BIP9 using the same parameters for BIP141 and BIP143, likely in v0.13.1. The implementation for the reference client is available on Github. This proposal has the added benefit of reducing transaction malleability.
Updated on: 2023-05-19T23:39:45.857953+00:00