For accountability reasons:

If public keys of each signer is known, can the 2 out of 3 parties be identified later, or just that it was some combination of the 3 parties?

If the 2 parties can not be identified, how should this be done if its necessary?

  • Just to be clear, you mean transactions with more than one signature attached to them, not transactions with a single signature made by multiple parties (threshold signatures). Is that correct? Sep 10, 2018 at 1:28

1 Answer 1


When spending a multisig output, the signatures and redeem script are public information.

This allows you to identify:

  1. The number of potential signers
  2. The number of required signatures
  3. Public keys for all potential signers
  4. Which keys signed the transaction (from the signature).

It will not reveal the identity of who owns a public key, unless you have some offchain analysis to go with this data, and already know who owns which public key.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.