Bitcoin Forum
May 04, 2024, 11:46:36 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Sighash_NoInput  (Read 148 times)
This is a self-moderated topic. If you do not want to be moderated by the person who started this topic, create a new topic.
user512 (OP)
Newbie
*
Offline Offline

Activity: 12
Merit: 6


View Profile
June 18, 2019, 11:01:49 AM
 #1

Hi, everyone,
I have to ask you about SIGHASH_NOINPUT signature script. Means it that I can write a transaction its output can be rewritten in the future because the signature doesn't include output hash?
In original Eltoo whitepaper is written:
Quote
Notice that binding allows us to spend any output, without invalidating the signatures, as long as the output scripts and the input scripts match.
What means "output scripts and the input scripts match"? That means the next transaction must have the same output script?
1714866396
Hero Member
*
Offline Offline

Posts: 1714866396

View Profile Personal Message (Offline)

Ignore
1714866396
Reply with quote  #2

1714866396
Report to moderator
The grue lurks in the darkest places of the earth. Its favorite diet is adventurers, but its insatiable appetite is tempered by its fear of light. No grue has ever been seen by the light of day, and few have survived its fearsome jaws to tell the tale.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714866396
Hero Member
*
Offline Offline

Posts: 1714866396

View Profile Personal Message (Offline)

Ignore
1714866396
Reply with quote  #2

1714866396
Report to moderator
Carlton Banks
Legendary
*
Offline Offline

Activity: 3430
Merit: 3071



View Profile
June 18, 2019, 08:43:21 PM
Last edit: June 19, 2019, 07:41:50 AM by Carlton Banks
Merited by bob123 (1)
 #2

Hi, everyone,
I have to ask you about SIGHASH_NOINPUT signature script. Means it that I can write a transaction its output can be rewritten in the future because the signature doesn't include output hash?
In original Eltoo whitepaper is written:
Quote
Notice that binding allows us to spend any output, without invalidating the signatures, as long as the output scripts and the input scripts match.
What means "output scripts and the input scripts match"? That means the next transaction must have the same output script?


0. The "no input" operation is being very very carefully thought out. Several ways to achieve it have been proposed, but so far everyone seems happy to continue to think about it some more. This is because it introduces a specific form of malleability (deliberately) to transactions, which could be misunderstood or abused. Note that this is not the same form of malleability that was removed when tightening signature rules, or with segregated witness, this is a different type of malleation than those.

so, the most important point imo is: whichever way "no input" gets introduced to Bitcoin script, it might not be in the form of any of the proposals that are around now. Wait and see, things could change (they have a couple times already).



1. It means the inputs can be unspecified when transactions are signed. That would be rejected by Bitcoin validation now. Some have suggested the amount should be specified.

2. all inputs and outputs are basic scripts, written in Bitcoin's own scripting language. What I think this probably means (without reading the original) is that the input script must be the same logic as the output script, but not necessarily the same money input needs to be used as the money output

Vires in numeris
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!