New BIP: Low S values signatures



Summary:

On August 16, 2016, Luke Dashjr and Johnson Lau via bitcoin-dev had a discussion regarding the ECDSA verification process applied to signatures passed to operators such as OP_CHECKSIG, OP_CHECKSIGVERIFY, OP_CHECKMULTISIG, or OP_CHECKMULTISIGVERIFY. These operators perform ECDSA verifications on pubkey/signature pairs and iterate from the top of the stack backwards. However, if the signature does not pass the IsLowDERSignature check, the verification fails. Dashjr points out that the IsLowDERSignature function in Bitcoin Core is not directly called, but he will clarify this.


Updated on: 2023-05-19T23:40:32.418329+00:00