Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [key-tweaking]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
1 answer
109 views

Which private key is used in Taproot transactions?

The transaction only has one input, where its scriptPubKey is --> Op_1 Q , where Q is the tweaked public key. Let p = private key, P = Public key, q = p + tweak, Q = tweaked Public key To create ...
J S's user avatar
  • 35
0 votes
1 answer
107 views

Do we need a taproot commit for multisignatures if there is no script path, but we are using the MuSig2 protocol?

I read in some article for Taproot that if there is no need for a script path spending and a number of participant (multisignature with key aggregation) create together a taproot output key (key for a ...
LeaBit's user avatar
  • 950
0 votes
0 answers
124 views

How does tweaking work for x-only keys, and what is not good in the example I gave?

How does normal key tweaking work in case of Schnorr digital signature schemes? For all examples I am using online tool for point multiplication and point addition. (I suggest you to use them if it is ...
LeaBit's user avatar
  • 950
1 vote
1 answer
260 views

How to get signature for tweaked public key in P2TR in case of multiple signature?

EDIT: Can we just tweak the signature with the root MAST as well? As I understand, the public key in scriptPubKey for P2TR is obtained by tweaking (let's call it original public key) and the root of ...
LeaBit's user avatar
  • 950
2 votes
1 answer
166 views

What does Pay to Contract (P2C) mean?

What does Pay to Contract (P2C) mean in Bitcoin? Is it just tweaking private/public key with the hash (represented as a number) of some message and then using classic P2PKH? For example, if we are ...
LeaBit's user avatar
  • 950
3 votes
0 answers
35 views

Should an even Y coordinate be enforced after every key-tweak operation, or only at the end?

This is a very niche question regarding BIP340 and key tweaking with even-only public keys. I feel my question may be a matter of opinion, since there doesn't appear to be an accepted right / wrong ...
cmdruid's user avatar
  • 31
1 vote
1 answer
403 views

I get an Invalid Schnorr signature when trying to broadcast a taproot transaction

I have 0.00036134 testnet bitcoin at the segwit v1 address: tb1p3au39skpdd8suuhunr4ymp6ca6akv9keq20v5twuagpmyqntqaasl22f4w I wrote this script to achieve 2 things: archive a hash in a transaction and ...
ChristianOConnor's user avatar
3 votes
2 answers
414 views

Is tweak used when spending from script path for Taproot?

I understand that a taproot output can be either spent using key path or script path. With key path, a tweak is applied to the private key and then sign the sighash. The signature is provided as a ...
Joy Wang's user avatar
4 votes
2 answers
635 views

Signing taproot key-path transaction from rust-bitcoin

I'm trying to make a taproot HTLC using rust-bitcoin for an atomic swap protocol. My plan is that in the "happy case" of my protocol, the coins are spent with the key-path, and then there is ...
rijndael's user avatar
1 vote
1 answer
247 views

What would happen if you tweaked a public key with an odd y-coordinate?

From BIP341 this example code shows how you can tweak an x-only pubkey: def taproot_tweak_pubkey(pubkey, h): t = int_from_bytes(tagged_hash("TapTweak", pubkey + h)) if t >= ...
Darius's user avatar
  • 789
2 votes
0 answers
258 views

How does OP_CHECKSIG work for Taproot script path spending?

I've been studying all the ways Taproot transactions can be spent and I can get all of them to work except for when script path spending is used and the script is executed. Transaction 0c045625... is ...
Zephyrus's user avatar
  • 782
5 votes
2 answers
770 views

What does it mean to tweak a public key?

Public key tweaks are often talked about in the context of taproot but I cannot find a definition of what precisely "tweaking" means.
andozw's user avatar
  • 55
5 votes
2 answers
973 views

What is an adaptor signature?

What is an adaptor signature in Bitcoin? A simple definition with some examples that could be understood without knowing cryptography in detail
user avatar
9 votes
1 answer
1k views

How to tweak a public key for Taproot

From what I know, to tweak a public key, I can use: Q = P + H(P|c)G where Q is the tweaked public key P is the initial public key (P = xG where x is the private key) H is the hash function | is ...
Keijyu's user avatar
  • 105
1 vote
1 answer
246 views

Can you use un-tweaked public key with P2TR?

Given some public key, is turning it into a working P2TR address and then going back from P2TR to get the same pubkey possible? I've read about the tweaking but don't really get it - do you need to ...
monke's user avatar
  • 45
2 votes
2 answers
141 views

Why don't add salt to the tapscript in Taproot?

The corresponding Merkle proof needs to be given when unlocking UTXO using MAST, where the hash of an unused script will be included. For the observation, it seems possible to guess the unused script ...
sphpmp's user avatar
  • 127
2 votes
2 answers
164 views

Retweaking other person's or my own taproot address

Suppose I get a taproot address=schnorr public key from an exchange that is not tweaked using mast merkle root and I wish to tweak that public key. This will yield a potentially different public key. ...
Hugo Franklin's user avatar