From 492d090c1c752f009b7a7fc456ae19767834b01c Mon Sep 17 00:00:00 2001 From: Pieter Wuille Date: Sun, 9 Nov 2014 04:10:44 -0800 Subject: [PATCH] Problem 10 is also under control of the script creator --- bip-0062.mediawiki | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bip-0062.mediawiki b/bip-0062.mediawiki index 0c70a343..efcebae1 100644 --- a/bip-0062.mediawiki +++ b/bip-0062.mediawiki @@ -32,7 +32,7 @@ Several sources of malleability are known: # '''Sighash flags based masking''' Sighash flags can be used to ignore certain parts of a script when signing. # '''New signatures by the sender''' The sender (or anyone with access to the relevant private keys) is always able to create new signatures that spend the same inputs to the same outputs. # '''Signature reordering''' If a signature is valid for more than one pubkey, for instance due to a CHECKMULTISIG where two or more of the keys are equivalent, the order of signatures can be changed. -The first six and part of the seventh can be fixed by extra consensus rules, but the last three can't. Not being able to fix #7 means that even with these new consensus rules, it will always be possible to create outputs whose spending transactions will all be malleable. However, when restricted to using a safe set of output scripts, extra consensus rules can make spending transactions optionally non-malleable (if the spender chooses to; as he can always bypass #8 and #9 himself). +The first six and part of the seventh can be fixed by extra consensus rules, but the last three can't. Not being able to fix #7 and #10 means that even with these new consensus rules, it will always be possible to create outputs whose spending transactions will all be malleable. However, when restricted to using a safe set of output scripts, extra consensus rules can make spending transactions optionally non-malleable (if the spender chooses to; as he can always bypass #8 and #9 himself). ==Specification==