BIP 118 and SIGHASH_ANYPREVOUT



Summary:

ZmnSCPxj proposed a Decker-Russell-Osuntokun construction that could have only a single internal taproot pubkey, `P = MuSig(A, B)` for a channel between A and B. Transactions would be signed with the internal taproot pubkey using `SIGHASH_ANYPREVOUTANYSCRIPT`. Update transactions would require a monotonically-increasing `nLockTime`, while state transaction input would have an `nSequence` requiring a relative locktime of the agreed-upon unilateral close delay. The assumption is MuSig signing, which requires 1.5 round trips for a channel, or three broadcast rounds for a multiparticipant (n >=3) construction. Andrew Poelstra has updated BIP 118 to the latest thinking with the ANYPREVOUT bip, and opened a draft pull request to update it. There are some significant changes since previous discussion, including complete lack of chaperone signatures or anything like it and that ANYPREVOUTANYSCRIPT no longer commits to the value. The pull request doesn't come with tested code at this point.


Updated on: 2023-06-14T02:52:49.825549+00:00