You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -24,35 +24,43 @@ Deploying the aforementioned fixes in the original script system is not a simple
24
24
== Specification ==
25
25
A new transaction digest algorithm is defined, but only applicable to sigops in version 0 witness program:
26
26
Double SHA256 of the serialization of:
27
-
1. nVersion of the transaction
28
-
2. hashPrevouts
29
-
3. hashSequence
30
-
4. transaction id and output index of the output spent by this input
31
-
5. subscript of the input
32
-
6. value of the output spent by this input
33
-
7. nSequence of the input
34
-
8. hashOutputs
35
-
9. nLocktime of the transaction
36
-
10. sighash type of the signature
37
-
38
-
The items 1, 4, 5, 7, 9, 10 have the same meaning as the original algorithm. <refname=wiki></ref>
27
+
1. nVersion of the transaction (4-byte little endian)
28
+
2. hashPrevouts (32-byte hash)
29
+
3. hashSequence (32-byte hash)
30
+
4. outpoint (32-byte hash + 4-byte little endian)
31
+
5. scriptCode of the input (varInt for the length + script)
32
+
6. value of the output spent by this input (8-byte little endian)
33
+
7. nSequence of the input (4-byte little endian)
34
+
8. hashOutputs (32-byte hash)
35
+
9. nLocktime of the transaction (4-byte little endian)
36
+
10. sighash type of the signature (4-byte little endian)
37
+
38
+
All components in the original algorithm, including the behavior <code>OP_CODESEPERATOR</code>, remains unchanged. The only difference is the way of serialization and the inclusion of amount being spent.
39
+
40
+
The items 1, 4, 7, 9, 10 have the same meaning as the original algorithm. <refname=wiki></ref>
41
+
42
+
The item 5:
43
+
*For P2WPKH witness program, the scriptCode is <code>0x1976a914{20-byte-pubkey-hash}88ac</code>.
44
+
*For P2WSH witness program,
45
+
**if the <code>witnessScript</code> does not contain any <code>OP_CODESEPERATOR</code>, the <code>scriptCode</code> is a <code>varInt</code> for the length of the <code>witnessScript</code>, followed by the <code>witnessScript</code>.
46
+
**if the <code>witnessScript</code> contains any <code>OP_CODESEPERATOR</code>, the <code>scriptCode</code> is the evaluated script, with all <code>OP_CODESEPARATOR</code> and everything up to the last <code>OP_CODESEPARATOR</code> before the signature checking opcode being executed removed, and prepended by a <code>varInt</code> for the length of the truncated script.
39
47
40
48
The item 6 is a 8-byte value of the amount of bitcoin spent in this input.
41
49
42
-
hashPrevouts:
43
-
*If the ANYONECANPAY flag is not set, hashPrevouts is the double SHA256 of the serialization of all transaction ids and output indexes involved in this transaction;
44
-
*Otherwise, hashPrevouts is a uint256 of 0x0000......0000.
50
+
<code>hashPrevouts</code>:
51
+
*If the ANYONECANPAY flag is not set, hashPrevouts is the double SHA256 of the serialization of all input outpoints;
52
+
*Otherwise, <code>hashPrevouts</code> is a <code>uint256</code> of <code>0x0000......0000</code>.
45
53
46
-
hashSequence:
54
+
<code>hashSequence</code>:
47
55
*If none of the ANYONECANPAY, SINGLE, NONE sighash type is set, hashSequence is the double SHA256 of the serialization of nSequence of all inputs;
48
-
*Otherwise, hashSequence is a uint256 of 0x0000......0000.
56
+
*Otherwise, <code>hashSequence</code> is a <code>uint256</code> of <code>0x0000......0000</code>.
49
57
50
-
hashOutputs:
51
-
*If the sighash type is neither SINGLE nor NONE, hashOutputs is the double SHA256 of the serialization of all output scriptPubKey with value;
52
-
*If sighash type is SINGLE and the input index is not greater than the number of outputs, hashOutputs is the double SHA256 of the output scriptPubKey with value of the same index as the input;
53
-
*Otherwise, hashOutputs is a uint256 of 0x0000......0000.
58
+
<code>hashOutputs</code>:
59
+
*If the sighash type is neither SINGLE nor NONE, hashOutputs is the double SHA256 of the serialization of all output value (8-byte little endian) with scriptPubKey (<code>varInt</code> for the length + script);
60
+
*If sighash type is SINGLE and the input index is not greater than the number of outputs, <code>hashOutputs</code> is the double SHA256 of the output value with <code>scriptPubKey</code> of the same index as the input;
61
+
*Otherwise, <code>hashOutputs</code> is a <code>uint256</code> of <code>0x0000......0000</code>.
54
62
55
-
The hashPrevouts, hashSequence, and hashOutputs calculated in an earlier verification may be reused in other inputs of the same transaction, so that the time complexity of the whole hashing process reduces from O(n<sup>2</sup>) to O(n).
63
+
The <code>hashPrevouts</code>, <code>hashSequence</code>, and <code>hashOutputs</code> calculated in an earlier verification may be reused in other inputs of the same transaction, so that the time complexity of the whole hashing process reduces from O(n<sup>2</sup>) to O(n).
56
64
57
65
Refer to the reference implementation, reproduced below, for the precise algorithm:
58
66
@@ -112,6 +120,69 @@ Refer to the reference implementation, reproduced below, for the precise algorit
The serialized signed transaction is: 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
0 commit comments