From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 09 Jun 2026 16:14:57 -0700 Received: from mail-oa1-f59.google.com ([209.85.160.59]) by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1wX5eq-00014M-Po for bitcoindev@gnusha.org; Tue, 09 Jun 2026 16:14:57 -0700 Received: by mail-oa1-f59.google.com with SMTP id 586e51a60fabf-440d6ccfa1asf9178870fac.1 for ; Tue, 09 Jun 2026 16:14:56 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1781046890; cv=pass; d=google.com; s=arc-20240605; b=ZA2/8TFhUJUbBJ6HqhGzpAGqfqtNNEqHplWA1+h03uEFTn97H2UOVMXbUSXZqppkyP Ad77NgIeY9MEdzcv08D4pwpZJnEVqdHjhCTq5B1Cx9pIF4fAcIDbrJDa4ml88cIQGzJa sH1SUJvQwA0sKsm3q1Uu8xTf0f+yHtyBtJrrgx5I4U6UPfondSTvYRifbW/KUbuaMUU8 oV0TNwvyQuBGu6UnjF05mQlMH2JMjQDfdVDFP+wldnG3Oc35/Y3XvvKv58ky7hty3Saw MMvUH2IXdEbuIxn6eNqJPRArPhS6ruBKmAjr7XXLWY7D3eTsFloeYn3JPAo2hIajg9o0 7V1g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:content-transfer-encoding :in-reply-to:content-language:from:references:to:subject:user-agent :mime-version:date:message-id:sender:dkim-signature; bh=88ifGyx2cxXqH/5zjkEPFLA4h3VO0gyBMpIvBJ8A7s0=; fh=LOTq/HuEEcGeS+WIv6S9ArYL45IDhvUMsYoIJdf4X94=; b=MUS08BvysXkW8WgipF3L8yWnPIgKMNOsFSmTbYRXFooy4HsFw8NvDcxDXhYz/wRZXU 5q6Je+O7cbvzVU3Nb7vEhUTaHUHhPtU9jbtmJ6gAppBYVhqHbqa1m7fT4u18x44ZBLRl qo/eOpdP4oEpS72M4V0sE82HCRgnZX79csASY8aEQOPGUMzKKeModvpZ5V3oXQJx3NEU 6oaGcXkMYuAK3EsmgbdKoSwVNYLY1TQ6rEkfFHIyrIZanFE/QRmGa8JIKesLDQdA2w7m E3KJkeng4RyJEoqpK9nGoMgF7I6EjWi2TuF1Xz/Fe2Np0uk2pfBErH1vu1yHalyduPyQ SoPg==; darn=gnusha.org ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@msgilligan-com.20251104.gappssmtp.com header.s=20251104 header.b="faZN/hpc"; spf=none (google.com: sean@msgilligan.com does not designate permitted sender hosts) smtp.mailfrom=sean@msgilligan.com; dara=pass header.i=@googlegroups.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1781046890; x=1781651690; darn=gnusha.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:content-transfer-encoding:in-reply-to :content-language:from:references:to:subject:user-agent:mime-version :date:message-id:sender:from:to:cc:subject:date:message-id:reply-to; bh=88ifGyx2cxXqH/5zjkEPFLA4h3VO0gyBMpIvBJ8A7s0=; b=E9Gne2Pqvg+zl+wS0fHM92I1nWO2ZFjd228q/XYbXeWZ3FTCvQ1WSyJqRwrzcjH8bt S7/BOFav5Oi0HGVSM1OispoUiRp/X52GHSN4gX1eV9tamTXM0PjUv2s7H8cL3431Zd6o nKvFcvj5Y8GOMzc2phR3Ok2mRlK+IIrIAFkvT8SPNnF8TKrIGp++D+hS68kMgdalnMmG FIIjRhSlTWkCkOKgOBjrWXOqsP5yTQBxSICJDbO2eYf3h5v7wuRkn9rt790/ICmIJFBG ERx7+G2Ou3iDR0eWUONP2LNAyPGQXTKzj7KhlmRo6bWD2B5oMxqv94j25jFtvv9nrIOA ZqHg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781046890; x=1781651690; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:content-transfer-encoding:in-reply-to :content-language:from:references:to:subject:user-agent:mime-version :date:message-id:x-gm-gg:x-beenthere:x-gm-message-state:sender:from :to:cc:subject:date:message-id:reply-to; bh=88ifGyx2cxXqH/5zjkEPFLA4h3VO0gyBMpIvBJ8A7s0=; b=bc75v7ztxBR6FqIRmmvciPq+rcv8rAcBUgAXpd7OvtyiQ6Cy8I3DW/MnbRtvo889zm nBxQiDQIUKCC2zR8CmTHokjJ4LoplBx8/bXhiOeZWPEUbwdUetHfbONth0Y94nNPl4Vm biMzcOn2xceF/EC0+TOhPFUD+OPK0EP+R3mbjdukChm7kG7cVkfMIiDRbImUqLnnAVap aYdtb/Gs5xcqBIbBtweFyCndsLhlRTjFYZdNYJV687Zh2+L5mSRtIyVxnb7jv4dqKiBa qKlBYa2Nmjp9pPhuZSO4yiHMh7SO4tSlwijBnMfAlYcbXwZ0siqi5B+CUyz5Nqaq8cqa beSg== Sender: bitcoindev@googlegroups.com X-Forwarded-Encrypted: i=2; AFNElJ8+t3JqKHbJZrg5KCIDOf1rw83C1ticC29NFs9pnxy21JEjkzst3HZckge2Ooj0NJM8KyghQR91QRlV@gnusha.org X-Gm-Message-State: AOJu0Yztibj2xarvbAQM3+P6WfmscfrO/5WibpG3/Rg78qx28EQTF1cy MW7XNAMAxh+2zCUvw52GJ3UQDZJb9/4iRD8aQS9hT6kqqffIeKaV2LuY X-Received: by 2002:a05:6870:3c8a:b0:43b:9a63:a7dc with SMTP id 586e51a60fabf-44145ece21emr9627910fac.18.1781046890683; Tue, 09 Jun 2026 16:14:50 -0700 (PDT) X-BeenThere: bitcoindev@googlegroups.com; h="AX0PUUcwL38aSmA8DhJZvD8M2nDnUz5ZiR8cYGsWXkLxzZ6wRQ==" Received: by 2002:a05:6870:3a1a:b0:43d:33ef:23cb with SMTP id 586e51a60fabf-440d865ada1ls2182782fac.2.-pod-prod-00-us-canary; Tue, 09 Jun 2026 16:14:46 -0700 (PDT) X-Forwarded-Encrypted: i=2; AFNElJ9cR8gbMp0yT0NAzcZIHdXC2QWwv+TnmaQOPWc8Fs7dynyNDKL0WTcXvYllX/hapsWgIJZz5k09udJR@googlegroups.com X-Received: by 2002:a05:6808:1806:b0:467:d71:7f1a with SMTP id 5614622812f47-48692e3b156mr8511807b6e.21.1781046886097; Tue, 09 Jun 2026 16:14:46 -0700 (PDT) Received: by 2002:a05:6809:10:20b0:486:3611:b101 with SMTP id 5614622812f47-48702263b20msb6e; Tue, 9 Jun 2026 16:12:32 -0700 (PDT) X-Forwarded-Encrypted: i=2; AFNElJ/MZJ0Ax1lBnJd74n0j0dF0hyNpLUjaSO8xIjkbk1jT+OksoXDRmD65k48IcH5fEScT8Z5mjEMAzGLQ@googlegroups.com X-Received: by 2002:a05:7022:397:b0:136:8b76:14eb with SMTP id a92af1059eb24-13807d7ae82mr9297247c88.14.1781046751023; Tue, 09 Jun 2026 16:12:31 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1781046751; cv=none; d=google.com; s=arc-20240605; b=TZMJoKwIzjNBxI7Ut+u7aDJk2vIkKP4a6A7qJremPmLr57JIr83piarzGZNo05xGUD l8VNG0+fOVd0JVChtGu1lmQaMTni7/JpZsTm0ncC7cn8ayUGovDfUMvTRy+M0H+DpLDD AFnvelW4FsYPSo1e+Zs+KEMJKAdlcNY5h2TgJlzW1cmfhEU7dQGSncsJqi5sTKX7HkZ7 /DF0lYY9ZC/6cfpe6U3wgEm9CEpPR0TjEv57WbUlWxGRbTkq2yXyGnsBiX5EFpLz+N16 lPZbdEGVkeo6kjmhAkgKU2/ByHSsUucnWZZeY5VFDp4VEEec2rj/aGskmXwpHRJWXClf +Wqw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=content-transfer-encoding:in-reply-to:content-language:from :references:to:subject:user-agent:mime-version:date:message-id :dkim-signature; bh=xxFwo+o6LNMQhwgY2KhFiD/bNjJqvqSmyx1ODskrq2Q=; fh=MkTlR1zf2z6zgRxA6/9q//9CYrS2hu89OF/QPA3CdG8=; b=W4jdivPQOfL2mZ8S0lml3eb1eWJOB8GVvN7C009YG8u5VmllQWrxNGhc8jjj8KNpdC bZbp3kjWcOenO/Xml8XJp/g56rMI4/F/XETfmf5HMJHQ1ZhWaIqPIpt//Gl2GRTBBp7M DCV3E1UCExPJzWN8YqixNk7SKleBHn3hkeHXkZvurxP37E0tQYav6hPMPa0frvMUiAB1 Zdx6Blx9p7ZOUY8GMQ3ACV6er/B0MQ2MukuAds077vG6hN8P/UxzFspwbB/Ffk0anwK0 vc1PKXTg1U5PjR4r7KelLfp9T/AZtvLDUm42mROBSln6nddKlPC5W0r8ArowJG9VZm4w cVBw==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@msgilligan-com.20251104.gappssmtp.com header.s=20251104 header.b="faZN/hpc"; spf=none (google.com: sean@msgilligan.com does not designate permitted sender hosts) smtp.mailfrom=sean@msgilligan.com; dara=pass header.i=@googlegroups.com Received: from mail-dl1-x1241.google.com (mail-dl1-x1241.google.com. [2607:f8b0:4864:20::1241]) by gmr-mx.google.com with ESMTPS id a92af1059eb24-137f555614dsi741218c88.4.2026.06.09.16.12.30 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 09 Jun 2026 16:12:30 -0700 (PDT) Received-SPF: none (google.com: sean@msgilligan.com does not designate permitted sender hosts) client-ip=2607:f8b0:4864:20::1241; Received: by mail-dl1-x1241.google.com with SMTP id a92af1059eb24-137c0db2638so509251c88.2 for ; Tue, 09 Jun 2026 16:12:30 -0700 (PDT) X-Forwarded-Encrypted: i=1; AFNElJ/eydGxVjmU7olSh4EOoK1G7RrzEM02nK4Y7CsepIbLFjpeGQyVN6RqxPVlNDnxIH0Z35lUGAScMYdt@googlegroups.com X-Gm-Gg: Acq92OGqOFrn03HoJXjjd3yjPpJehvcG2n1jUeK+uqZ5k344escrQHbyJ9+LFZE/v9N nNu+qiOOagy+7DmDMJYbFFOn55xxzn5sRd80sfUwDoLu8+QIEm59r40y+BZOxULkT5JH7CK8WhA 7Ro9zt8dJROWisGp6NRhV1cfuU87uSyqsIb22deiaddX5BVCUfYb/68JcrTVeFPJ4EGSVaLLI0z 4YXrCOOUWHwdAFjGllHAWVfFLH1ecWCI7eVn7B7XzYvdkpEPJ2HOp3NwMrHnp5pKrlOh1/IO0T7 8HRczGPZHqNQ1axZev6LYYxttHoLfueXYA3H19Y5dy41fdov+w8EvxIKuGgPYE7Vat/YUJwYkvL nhBqbQt2yL83oja846v/HEos7S0xVQMn05FdKpSvD6Yxv5r1K3HRhCAb2Lsyrw6Y7/mWg+gTMgb 5kKpFQX8Mv6yYB2xc9jJl9ONmRCcc+6YxZrfy1MEixH106SvR8QYPA1E/AW5t3pjQtKyUq++BV0 MRO2FrykDT/D+L+YxfwgQiYdPSxYLhicg== X-Received: by 2002:a05:7300:7fa8:b0:304:2af3:5fef with SMTP id 5a478bee46e88-3077b815ee4mr5452774eec.8.1781046749679; Tue, 09 Jun 2026 16:12:29 -0700 (PDT) Received: from ?IPV6:2600:1700:87f0:a6e0:4d30:91fc:b818:6311? ([2600:1700:87f0:a6e0:4d30:91fc:b818:6311]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-30777ecf9e9sm17895253eec.28.2026.06.09.16.12.28 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 09 Jun 2026 16:12:28 -0700 (PDT) Message-ID: Date: Tue, 9 Jun 2026 16:12:27 -0700 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [bitcoindev] [BIP Proposal] Informational BIP on Low-R Signature Grinding To: Murch , bitcoindev@googlegroups.com References: <44b6bccc-c34f-491c-9f8f-fac5045290de@msgilligan.com> <40918d93-092c-451a-96e1-03f363ac3720@murch.one> From: Sean Gilligan Content-Language: en-US In-Reply-To: <40918d93-092c-451a-96e1-03f363ac3720@murch.one> Content-Type: text/plain; charset="UTF-8"; format=flowed Content-Transfer-Encoding: quoted-printable X-Original-Sender: sean@msgilligan.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@msgilligan-com.20251104.gappssmtp.com header.s=20251104 header.b="faZN/hpc"; spf=none (google.com: sean@msgilligan.com does not designate permitted sender hosts) smtp.mailfrom=sean@msgilligan.com; dara=pass header.i=@googlegroups.com Precedence: list Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com List-ID: X-Google-Group-Id: 786775582512 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Score: 2.3 (++) Thanks Murch! We will start work on a Draft. Worrying about the test vectors later=20 sounds like a great idea. They are important and probably the hardest=20 part of the effort, but aren't necessary for a draft. As recommended in BIP 3, we'll create a PR against our fork of the BIPs=20 repo and report back when we have made some progress. Regards, Sean On 6/9/26 1:48 PM, Murch wrote: > Hi Sean, > > Thanks for proposing this idea. It would be splendid if someone were=20 > to write up the best practices for low-r signature grinding. You don=E2= =80=99t=20 > need to worry about test vectors too much in advance, they are only=20 > required for advancing a BIP to the Complete status, so if people have=20 > more suggestions, those could also added to the document after the PR=20 > is open or even after it has been published in Draft. > > Cheers, > Murch > > On 2026-06-09 00:02, Sean Gilligan wrote: >> Hi Everyone, >> >> I would like to propose a new informational BIP to formally document=20 >> the Low-R signature algorithm used by Bitcoin Core and many other=20 >> wallets. >> >> It was implemented in 2018 in Bitcoin Core by PR 1366 [0]. The Low-r=20 >> grinding page on Bitcoin Optech [1] references several other=20 >> implementations. >> >> While working on secp256k1-jdk [2] (a new wrapper for secp256k1 for=20 >> Java/JDK/JVM-languages) we ended up looking at the C++ implementation=20 >> for reference and at rust-secp256k1 for a test vector. Since all=20 >> wallets should implement the algorithm identically (for privacy=20 >> reasons) it would be helpful to have the behavior clearly documented=20 >> in an informational BIP. >> >> I have spoken with a handful of developers who think having a BIP=20 >> would be a good idea and it was suggested on PR 13666. >> >> It should be short and relatively simple and also have a nice=20 >> collection of test vectors. >> >> What do people think? Any suggestions on what should be included or=20 >> pointers to test vectors? >> >> Thanks, >> >> Sean >> >> [0] https://github.com/bitcoin/bitcoin/pull/13666 >> [1] https://bitcoinops.org/en/topics/low-r-grinding/ >> [2] https://github.com/bitcoinj/secp256k1-jdk >> > --=20 You received this message because you are subscribed to the Google Groups "= Bitcoin Development Mailing List" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to bitcoindev+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/= d44d4a53-4895-4f0a-8411-ca7627c2324b%40msgilligan.com.