Yes you could for example define a new rule that two signatures (double-spend) authorises something - eg miners to take funds. (And this would work with existing ECDSA addresses & unrestricted R-value choices).
I wasnt really making a point other than an aside that it maybe is sort-of possible to do with math what you said was not possible where you said "This [preventing signing more than one message] is impossible to implement with math alone". Adam On 21 December 2014 at 15:29, Peter Todd <p...@petertodd.org> > There's no need to get into the specifics of crypto math so early; you > can just as easily and only slightly less efficiently obtain the same > result with a few extensions to the Bitcoin scripting system to verify > ECDSA signatures directly. ------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk _______________________________________________ Bitcoin-development mailing list Bitcoin-development@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bitcoin-development