Good morning Johnson,
> > > Some way to sign an additional script (not committed to by the witness > > > program) seems like it could be a trivial addition. > > > > It seems to me the annex can be used for this, by having it contain both > > the script and the signature somehow concatenated. > > This is not possible since the whole annex is signed. It is possible if the > signed “script” does not require further input, like per-input lock-time, > relative lock-time, check block hash I understand, you are correct. Possibly the correct way would be to use another leaf version. The "script" of such a new leaf version would not actually be a script, but a delegation key. Then for this leaf version the actual script and signature from the delegation key attesting that script would be on top of the witness stack that will be used by the actual script. This has the nice property that the existence of a delegation key is hidden from the output, and that if an alternate script is in the MAST (as an alternative to the delegation), use of that alternate script does not reveal that delegation could have been possible. Regards, ZmnSCPxj _______________________________________________ bitcoin-dev mailing list bitcoin-dev@lists.linuxfoundation.org https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev
