Safer sighashes and more granular SIGHASH_NOINPUT



Summary:

In a bitcoin-dev email thread, Christian Decker and Anthony Towns discussed the commitment to sequence numbers in transactions. Committing only to sequence numbers would not prevent adding inputs as any input could be replaced by almost any arbitrary other transaction. Decker suggested that committing to the inputs directly would be a simpler solution than using a roundabout method like including a blanked field in BIP118. Decker proposed a new approach: always commit to the sequence of the same input, and only commit to hashSequence if all inputs and outputs are signed. He also mentioned that the next-generation SIGHASH will introduce signing of fees, previous scriptPubKey, and all input values, among other things. As such, it won't be a simple hack over BIP143. In conclusion, Decker suggested that BIP118 should be changed to an informational BIP, with a focus on the rationale and examples of NOINPUT and cross-referenced with the consensus BIP.


Updated on: 2023-05-20T18:06:14.645603+00:00