also, i should just point out that this compact format incurs more processing cost... in a database, for example, you still have to have all the truncated pubkey in the indexes still, but in the database you don't need to verify it, it is only on the submission process that this all has to be derived

plus, having the pubkey in the part that generates the hash acts as a namespace that reduces the chances of a two messages from different keys ever colliding, so, probably there is no logic to switching to this type of compact signature

Reply to this note

Please Login to reply.

Discussion

if it was to be done, probably you'd need to anyway add a 8 byte (64 bit) pubkey prefix which would serve as an adequate namespacer and work to quickly check the signature pubkey derivation is consistent... 8 bytes is still a lot of hash grinding to discover a collision and the only purpose of it is to reduce the chances of an in-protocol collision between two messages in any reasonable timespan

that would work, i think, i'll keep thinking about this of course, i'm a bit weird like that