Batch validation of CHECKMULTISIG using an extra hint field



Summary:

In this conversation, Mark is discussing a potential optimization opportunity for the CHECKMULTISIG algorithm in Bitcoin. The proposed idea suggests using a minimally-encoded bitmap to specify which public keys are used or skipped, instead of requiring the final parameter on the stack to be zero. This would allow for a more efficient validation process and could be useful for applications where interactive signing is not possible. While MuSig-like key aggregation schemes can be used for n-of-n thresholds, there are still use cases where explicit k-of-n thresholds must be used. FROST is an alternative that supports k-of-n but requires participation from all the signers in the set and additional data storage by privkey owners after the setup ritual. Despite this, the proposed batch-validation friendly CHECKMULTISIG algorithm would still be useful for such applications.


Updated on: 2023-06-16T02:13:45.523978+00:00