1

BIP 62 proposed to make transaction malleability impossible.

Why was this retracted and why are miners allowed to change a transaction id?

Also, what does it mean when someone says signatures cannot sign themselves? Is this implying we not only need a signature for the transaction, we need another signature for the transaction + signature?

4

BIP 62 proposed to make transaction malleability impossible.

No it didn't. It would have outlawed a limited number of known and addressable forms of malleability.

In particular, it did not prevent multisig transaction participants from just creating a new signature, malleating the transaction without invalidation. This type of malleability is trivial to perform, and breaks nearly every smart contract construction imaginable.

BIP62 was retracted because while it addressed some forms of malleability, it didn't and couldn't fix an equally bad one.

Instead, Bitcoin adopted BIP141 (Segregated Witness), which does not remove malleability, but makes it harmless. The transaction signatures just don't contribute to the txids anymore. Thus, while it is still possible to malleate transactions, doing so does not invalidate dependent transactions (as they refer to previous transactions using the txid). Other than BIP62, this solution applies to multisignatures as well, and also against all forms of non-discovered malleability.

  • Wow, the author of BIP62 himself. Apologies for the incorrect interpretation and the above makes much more sense. Why not, however, just make everything immutable and not just the inputs, outputs, amount, etc? – lolololol ol Dec 20 '17 at 22:01
  • How do you propose to make things immutable? The best thing that can be required is that all signatures are valid. If one signature is acceptable, how do you prevent the same people from creating a different but equally valid signature? – Pieter Wuille Dec 20 '17 at 22:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.