{"type":"rich","version":"1.0","author_name":"npub1zw7cc8z78v6s3grujfvcv3ckpvg6kr0w7nz9yzvwyglyg0qu5sjsqhkhpx","author_url":"https://nostr.ae/npub1zw7cc8z78v6s3grujfvcv3ckpvg6kr0w7nz9yzvwyglyg0qu5sjsqhkhpx","provider_name":"njump","provider_url":"https://nostr.ae","html":"📅 Original date posted:2015-01-21\n📝 Original message:Pieter Wuille \u003cpieter.wuille at gmail.com\u003e writes:\n\u003e Hello everyone,\n\u003e\n\u003e We've been aware of the risk of depending on OpenSSL for consensus\n\u003e rules for a while, and were trying to get rid of this as part of BIP\n\u003e 62 (malleability protection), which was however postponed due to\n\u003e unforeseen complexities. The recent evens (see the thread titled\n\u003e \"OpenSSL 1.0.0p / 1.0.1k incompatible, causes blockchain rejection.\"\n\u003e on this mailing list) have made it clear that the problem is very\n\u003e real, however, and I would prefer to have a fundamental solution for\n\u003e it sooner rather than later.\n\u003e\n\u003e I therefore propose a softfork to make non-DER signatures illegal\n\u003e (they've been non-standard since v0.8.0). A draft BIP text can be\n\u003e found on:\n\u003e\n\u003e     https://gist.github.com/sipa/5d12c343746dad376c80\n\nCut and paste bug in the last check:\n\n// Null bytes at the start of R are not allowed, unless it would otherwise be\n// interpreted as a negative number.\n    if (lenS \u003e 1 \u0026\u0026 (sig[lenR + 6] == 0x00) \u0026\u0026 !(sig[lenR + 7] \u0026 0x80))\n    return false;\n\nYou mean \"null bytes at the start of S\".\n\nCheers,\nRusty."}