Lightning Network uses Revocable Sequence Maturing Contracts.
The LN Paper specifies that:
If one wishes to permit revocable transactions [...] the output transaction construction would remain a 2-of-2 multisig:
2 Alice1 Bob1 2 OP CHECKMULTISIG
However, the current implementation uses elliptic curve point multiplication (not multisig). I have found this information in BOLT03 - to_local, but also here.
The benefits of the current approach are:
- smaller size of the Output Script
- only one signature required to unlock (vs 2 in the original spec)
Are there any other considerations besides these two for using elliptic curve point multiplication instead of multisig?