{"type":"rich","version":"1.0","author_name":"npub1g5zswf6y48f7fy90jf3tlcuwdmjn8znhzaa4vkmtxaeskca8hpss23ms3l","author_url":"https://nostr.ae/npub1g5zswf6y48f7fy90jf3tlcuwdmjn8znhzaa4vkmtxaeskca8hpss23ms3l","provider_name":"njump","provider_url":"https://nostr.ae","html":"📅 Original date posted:2019-12-17\n📝 Original message:\nGood morning David, t-bast, and all,\n\n\n\u003e I'm not aware of any way to currently force single-show signatures in\n\u003e Bitcoin, so this is pretty theoretical. Also, single-show signatures\n\u003e add a lot of fragility to any setup and make useful features like RBF\n\u003e fee bumping unavailable.\n\nWith `OP_CAT`, we can enforce that a particular `R` is used, which allows to implement single-show signatures.\n\n    # Assuming signatures are the concatenation of (R,s)\n    \u003cR\u003e OP_SWAP OP_CAT \u003cACINQ\u003e OP_CHECKSIG\n\nThe above would then feed `s` only on the witness stack.\n\nRegards,\nZmnSCPxj"}