Date: Mon, 28 Dec 2015 21:35:59 -0800
From: Peter Todd <pete@petertodd.org>
To: Bitcoin Dev <bitcoin-dev@lists.linuxfoundation.org>
Message-ID: <20151229053559.GA8657@muck>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="2oS5YaxWCcQjTEyO"
Content-Disposition: inline
Subject: [bitcoin-dev] We can trivially fix quadratic CHECKSIG with a simple
 soft-fork modifying just SignatureHash()
Precedence: list


--2oS5YaxWCcQjTEyO
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Occured to me that this hasn't been mentioned before...

We can trivially fix the quadratic CHECK(MULTI)SIG execution time issue
by soft-forking in a limitation on just SignatureHash() to only return
true if the tx size is <100KB. (or whatever limit makes sense)

This fix has the advantage over schemes that limit all txs, or try to
count sigops, of being trivial to implement, while still allowing for a
future CHECKSIG2 soft-fork that properly fixes the quadratic hashing
issue; >100KB txs would still be technically allowed, it's just that
(for now) there'd be no way for them to spend coins that are
cryptographically secured.

For example, if we had an issue with a major miner exploiting
slow-to-propagate blocks(1) to harm their competitors, this simple fix
could be deployed as a soft-fork in a matter of days, stopping the
attack quickly.

1) www.mail-archive.com/bitcoin-development@lists.sourceforge.net/msg03200.=
html

--=20
'peter'[:-1]@petertodd.org
0000000000000000094afcbbad10aa6c82ddd8aad102020e553d50a60b6c678f

--2oS5YaxWCcQjTEyO
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
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==
=Y3Ky
-----END PGP SIGNATURE-----

--2oS5YaxWCcQjTEyO--