Scriptless Scripts with ECDSA



Summary:

ZmnSCPxj, a contributor to the Lightning Network protocol, has expressed interest in using the SS (scriptless script) and HD (hierarchical deterministic) features for AMP (atomic multipath payments). However, he is uncertain about the compatibility of ECDSA (Elliptic Curve Digital Signature Algorithm) and Bellare-Neven SS and whether it would be easy to switch between them dynamically. Additionally, he questions how well B-N signature aggregation would work for Lightning use cases and suggests that a 2-of-2 with a single signature could help reduce the size of mutual close and commitment transactions.At the Lightning BOLT spec level, ZmnSCPxj suggests the need for a new global feature bit `option_support_scriptless` to support routing of scriptless-script conditional payments, which requires all nodes in the payment route to support this option. He also proposes local-level feature bits for `option_support_scriptless_ecdsa` and `option_support_scriptless_bn`, depending on the ease of translation between ECDSA and Bellare-Neven SS. This affects BOLT11 as it would need to support both `SHA256(secret)` and `secret * G` in invoices. Intra-path decorrelation may also be needed, which requires passing a blinding secret to each layer of the onion in the onion routes.


Updated on: 2023-05-24T23:30:45.664171+00:00