Transaction Signature Validation for Overwinter

Information on BCP 14 — "RFC 2119: Key words for use in RFCs to Indicate Requirement Levels" and "RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words"↩︎

ZIP 200: Network Upgrade Mechanism↩︎

ZIP 201: Network Peer Management for Overwinter↩︎

OP_CHECKSIG. Bitcoin Wiki↩︎

Zcash Protocol Specification, Version 2021.2.16. Section 4.7.1: Sending Notes (Sprout)↩︎

• CVE-2013-2292
• New Bitcoin vulnerability: A transaction that takes at least 3 minutes to verify
• The Megatransaction: Why Does It Take 25 Seconds?

SIGHASH_WITHINPUTVALUE: Super-lightweight HW wallets and offline data↩︎

BIP 143: Transaction Signature Verification for Version 0 Witness Program↩︎

BUIP-HF Digest for replay protected signature verification across hard forks, version 1.2↩︎

ZIP 202: Version 3 Transaction Format for Overwinter↩︎

ZIP 202: Version 3 Transaction Format for Overwinter↩︎

ZIP 201: Network Peer Management for Overwinter↩︎

"BLAKE2: simpler, smaller, fast as MD5", Section 2.8↩︎

ZIP 200: Network Upgrade Mechanism↩︎

OP_CHECKSIG. Bitcoin Wiki↩︎

ZIP 202: Version 3 Transaction Format for Overwinter↩︎

ZIP 202: Version 3 Transaction Format for Overwinter↩︎

In the original algorithm, a uint256 of 0x0000......0001 is committed if the input index for a SINGLE signature is greater than or equal to the number of outputs. In this ZIP a 0x0000......0000 is commited, without changing the semantics.↩︎

ZIP 203: Transaction Expiry↩︎

ZIP 143 Test Vectors↩︎

SignatureHash Test Vectors↩︎

ZIP 201: Network Peer Management for Overwinter↩︎

ZIP 201: Network Peer Management for Overwinter↩︎