2

With bitcoin-cli, I successfully spent (broadcast, was accepted by the regtest node and then mined) a tx spending two 1-of-2 script-path multisig outputs.

The spent prevout descriptors were:

tr(<unspendable_bip341_key>,multi_a(1,<even-parity-33-byte-key1>,<odd-parity-33-byte-key2>))

After the spending transaction was mined into a block, I viewed the multisig script: bitcoin-cli -regtest decodescript <tapscript> where <tapscript> was the penultimate element of the input witness stack. I got:

{
  "asm": "<x-only-32-bytes-of-key1> OP_CHECKSIG <x-only-32-bytes-of-key2> OP_CHECKSIGADD 1 OP_NUMEQUAL",
  "desc": "raw(<hex>)#<checksum>",
  "type": "nonstandard"
}

My questions are:

  1. Apparently, it's expected that the parity (first 0x02 or 0x03) byte is dropped from the 33 byte keys that I put in the descriptors, when I created the output. The keys become 32-byte x-only keys. When spending and verifying this, how does it recover the parity information, it appears to be lost in the decoded tapscript?
  2. Why does decodescript return nonstandard? My core version is v0.25, and the spent prevout was created by its bitcon-cli.
  3. btcdeb refuses to validate this script. This could be due to btcdeb being on the v0.24 still, however.

1 Answer 1

4
  1. Yes, the conversion from descriptor to script converts the keys to x-only form, because that is the only public key format supported inside tapscript. There is no parity information to recover; these are the full public keys as far as the BIP340 signature scheme is concerned.

  2. This script would be nonstandard when placed in a scriptPubKey directly. Inside tapscript, p2wsh, and p2sh, almost any script is permitted by policy.

  3. I am unfamiliar with btcdeb.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.