I noticed that the the latest BIP 134 now supports SIGHASH_SINGLE and friends. However, this support seems to reintroduce some quadratic hashing behavior because it calls SerializePartialTransactionv4 per non-SIGHASH_ALL input . In particular, if each input in a transaction has one SIGHASH_SINGLE CHECKSIG operation then the total amount of hashing done for the transaction will be quadratic in the number of inputs. While amount of hashing is not as severe as with the SIGHASH_ALL case, the amount of hashing done is still non-linear.