Low-r grinding
Also covering Signature grinding
Low-r grinding is an optimization for wallets where they keep generating new ECDSA signatures for the same transaction until the find a signature whose r value is on the lower half of the range, allowing it to be encoded with one fewer byte than a signature on the top half of the range.
This optimization only applies to legacy and segwit v0 transactions where ECDSA is used. Signatures in taproot transactions can’t be made any shorter.
Roughly half of all ECDSA transactions are expected to have high-r values and roughly half are expect to have low-r values, so grinding saves an average of 0.5 vbytes per signature in legacy transactions and 0.125 vbytes in segwit v0 transactions.
Optech newsletter and website mentions
2022
- BDK #779 adds support for creating low-r signatures
- LDK #1388 adds default support for creating low-r signatures
2019
2018