What would be a drawback if sum instead of SHA-256 of amounts was used the TapRoot signature message?
Would there be any drawback of using sum of amounts instead of SHA-256 of amounts in the TapRoot signature message? There is the sha_amounts (32): the SHA256 of the serialization of all input amounts. specified in the BIP-341: https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki#common-signature-message. SHA-256 seems more expensive than e.g. sum_amount (8): sum of all input amounts.
from Recent Questions - Bitcoin Stack Exchange https://ift.tt/T21IoCn
via IFTTT