Questions tagged [multi-signature]
Multi-signature addresses require m-of-n signatures to authorize spending funds sent to them.
595
questions
1
vote
0
answers
26
views
What is causing this Data Error from Trezor?
I'm experimenting with output descriptors and multi-sig wallets and I came across a problem providing the last signature to my 2-of-3 psbt.
Data Error: Input does not match scriptPubKey.
I'm ...
- 170
1
vote
1
answer
39
views
How to setup a multisig to be independent of any software wallet implementation, or alternative wallet setups without a single point of failure
New to self-custody so please forgive misunderstandings.
I am trying to setup BTC wallets for self-custody and I would like it to achieve the following 3 goals:
Simplicity of storing keys: full ...
- 133
1
vote
1
answer
50
views
What are the privacy implications of revealing one xpub in a multisig setup?
What information can a third party derive about a multisig wallet if one of the xpubs in the setup is known?
This could be relevant for a few reasons:
For a collaborative custody setup such as ...
- 11
2
votes
1
answer
53
views
Is it safe to use a private key for an existing singlesig wallet as one of the keys for a new multisig wallet?
I am new to hardware wallets and self-custody so apologies if I am mixing things up or trying to do something wrong here.
I got a Blockstream Jade and playing around with air-gapped keys and wallets ...
- 133
1
vote
1
answer
56
views
Is the trailing pathing in multi-sig descriptors necessary?
I created a multisig wallet with BlueWallet, and I want to convert the config file to a descriptor:
Name: Multisig Vault
Policy: 2 of 3
Derivation: m/48'/0'/0'/2'
Format: P2WSH
1E74CA69: xpub65..........
- 170
1
vote
0
answers
24
views
Trust PSBT Coldcard
I sent a psbt through HWI to my coldcard for signing (it is a multisig tx created with one of the keys in the CC at m/48h/0h/0h/2h) and I am getting the error:
HWI.hwilib.errors.BadArgumentError: ...
- 170
0
votes
0
answers
30
views
Combine two p2tr addresses into one
Is it possible to combine two (or more) P2TR addresses into a single P2TR address spendable by the owner of any one of the input addresses? I.e. like a 1-of-N multisig. Something like making tapscript ...
- 101
2
votes
1
answer
77
views
P2TR script-path multisig
With bitcoin-cli, I successfully spent (broadcast, was accepted by the regtest node and then mined) a tx spending two 1-of-2 script-path multisig outputs.
The spent prevout descriptors were:
tr(<...
- 216
1
vote
0
answers
26
views
Is there a way to prevent the third party malleability when using OP_GREATERTHANOREQUAL in multisig?
According to this issue, I noticed if taproot multisig script(using OP_CHECKSIGADD) uses OP_GREATERTHANOREQUAL instead of OP_NUMEQUAL, there's a third party malleability as quoted below.
For any ...
- 435
1
vote
0
answers
26
views
Trying to find Elegant solution to PSBT Multi-sig Signing
I am trying to sign an incoming PSBT in custom software I'm building and I'm having trouble understanding how the signing process of a PSBT actually works. I have a Trezor where the xPub I used in the ...
- 170
1
vote
1
answer
115
views
How to spend a multisig descriptor wallet transaction with bitcoin-cli?
I am looking for the correct way to spend multisig outputs with descriptor wallet bitcoin-cli.
In regtest, I successfully created a funding transaction tx1 with the following outputs:
out:0 sh(multi(1,...
- 216
0
votes
3
answers
54
views
Multi-Sig Transaction not broadcasting error - Script evaluated without error but finished with a false/empty top stack element
Trying to produce a multi-sig transaction. I have this so far.
Sent funds to : 2NDiRgpVVQ3CtYMi962myja69pFW8VSJ9Yp
https://mempool.space/testnet4/address/2NDiRgpVVQ3CtYMi962myja69pFW8VSJ9Yp
I guess ...
- 101
1
vote
1
answer
48
views
Trying to figure out non-canonical DER signature error for a specific tx
I have two transactions, they produce the same hash. But the first one throws Non-canonical DER signature error and the second one doesn't. This is a standard 2/3 multi-sig transaction.
Tx 1:
...
- 193
0
votes
1
answer
37
views
Can a Second Signer Add Data to a Bitcoin PSBT Transaction?
I'm working with Partially Signed Bitcoin Transactions (PSBTs) and have a question about the capabilities of secondary signers in the signing process. I understand that in a multi-signature scenario, ...
0
votes
1
answer
28
views
Handling UTXOs in Partially Signed Bitcoin Transactions (PSBTs) and Potential Double-Spend Scenario
I'm working with Partially Signed Bitcoin Transactions (PSBTs) and have a question about the behavior of transactions when the same UTXOs are involved in multiple transactions. Suppose I have a ...
0
votes
1
answer
45
views
Can You Create a Time-Locked PSBT in Bitcoin?
I am exploring the capabilities of Partially Signed Bitcoin Transactions (PSBTs) and am particularly interested in incorporating time locks. Is it possible to create a PSBT that includes a time lock ...
0
votes
1
answer
63
views
Handling Multi-Signature Transactions with PSBT in Bitcoin
I'm currently working with Partially Signed Bitcoin Transactions (PSBTs) and trying to understand the best practices for handling transactions that require signatures from multiple parties. ...
0
votes
0
answers
22
views
Can a Seed be Linked Across Two Multisig Wallets?
Consider two multisig wallets, Wallet A and Wallet B, both with a 2-of-3 signing scheme:
Wallet A consists of seeds A, B, and C.
Wallet B consists of seeds B, C, and D.
Now, let's create two ...
- 711
1
vote
1
answer
70
views
Does a OP_CHECKSIGADD and OP_EQUAL script for a threshold signature fail if you provide too many valid signatures in the unlocking script?
For this CHECKSIGADD script for a 2-of-3 multisig:
<pk1> OP_CHECKSIG <pk2> OP_CHECKSIGADD <pk3> OP_CHECKSIGADD OP_2 OP_EQUAL
What happens if you provide more than the 2 required ...
- 15.7k
3
votes
1
answer
85
views
Help! About how to spend OP_checksigadd Multi-sig
I write a simple taproot-based script in bitcoinjs, like:
<pk1> OP_CHECKSIG <pk2> OP_CHECKSIGADD <pk3> OP_CHECKSIGADD OP_2 OP_EQUAL
It should be a 3-2 threshold account, that require ...
- 33
1
vote
0
answers
25
views
Spending paths for subset of n-of-n multisig
I would like to achieve the following.
A group of N people come together and create an n-of-n multisig. Each of them funds this multisig with a custom amount of bitcoin. At some point in the future, ...
- 53
2
votes
0
answers
60
views
How to claim funds in a multisig address from a money pool psbt?
Mostly followed this guide on how to create a psbt where multiple users pool money together. Everything is done in regtest.
The gist of what I did is as follows:
Created 2 different descriptor ...
- 21
1
vote
0
answers
34
views
Is there an idiomatic way to prove ownership of a (extended) public key?
Is there an idiomatic way to verify ownership of an (extended) public key? Preferably without spending coins, although I'm also interested in methods of doing so by producing a transaction as this ...
- 265
0
votes
2
answers
74
views
How do pre-Segwit nodes interpret transactions containing Taproot OP_CHECKSIGADD?
When pre-Segwit nodes encounter blocks with Segwit transactions, they'll see them as "spent anyone can spend" transactions and so can validate them and move on to the next block.
However, ...
- 958
1
vote
1
answer
37
views
What did the opcode 0xba do prior to creation of OP_CHECKSIGADD?
From BIP0342:
The opcode 186 (0xba) is named as OP_CHECKSIGADD.
What did 0xba do prior to this?
- 958
1
vote
0
answers
50
views
Why does OP_CHECKSIG/OP_CHECKMULTISIG remove the signature from the subscript?
When OP_CHECKSIG is used, all instances of the signature are removed from the subScript before it's included in a transaction template to be verified. See also step 3 in this excellent diagram. The ...
- 958
3
votes
1
answer
143
views
How are Bitkey's spending limits enforced?
Block's new Bitkey is a 2-of-3 multi signature wallet (https://bitkey.world/en-US)
I've been reading their white paper, which is a good summary of their intentions, but doesn't really go into ...
- 33
1
vote
1
answer
58
views
BTC multisig wallet with rekeying
I'm trying to create a Bitcoin multisig wallet. At this point, the wallet must meet the following conditions
must be capable of k-of-n threshold signatures (schnorr, musig, etc.)
it should be ...
- 13
3
votes
1
answer
92
views
Creating a raw Segwit transaction from scratch and getting Signature must be zero for failed CHECK(MULTI)SIG operation
I am trying to create a Segwit transaction on TESTNET from scratch while referencing an online guide:
https://medium.com/coinmonks/creating-and-signing-a-segwit-transaction-from-scratch-ec98577b526a
...
- 207
0
votes
1
answer
203
views
bitcoinjs - mandatory-script-verify-flag-failed (Signature must be zero for failed CHECK(MULTI)SIG operation)
I'm trying to follow the below transaction example by magic eden and extend it to support multiple buyers and seller (in red). However I am having difficulties when I add more than one signature from ...
1
vote
0
answers
51
views
How can I know the Bitcoin Transfer Transactions on Bisq?
I am trying to get some blocks from Bisq.
I used their API to get the blocks. Then I discovered that blocks are missing some inputs, so I used their API again to get these transactions.
But, I ...
0
votes
1
answer
42
views
Can multisignature be required only to create a transaction?
I'm a little confused about multisignatures, so the following question may not even make sense. I understand that a transaction can be created with a script that requires M-of-N signatures as a ...
- 103
0
votes
0
answers
67
views
Export a taproot multisig wallet
I have created a wallet, added a descriptors to make it multisig with tr(KI, multi_a(2,pub1,pub2,pub3) command.
Now, I want to import this to some UI but since the wallet doesn't have a private key I ...
- 9
0
votes
1
answer
171
views
Multisig for Bitcoin ordinals wallet
I am trying to make and receive transactions on Unisat wallet, but Unisat doesn't support multisig. How do I implement multisig for a wallet that supports ordinals?
- 9
2
votes
1
answer
120
views
Zpub vs xpub not matching between seedsigner and sparrow?
Generated a multisig xpub via Seedsigner. Loaded this to sparrow via camera-reading of seedsigner's QR code. Sparrow & Seedsigner fingerprints match, as do derivation paths, but Seedsigner ...
- 339
1
vote
0
answers
114
views
Cannot import multisignature descriptor in Bitcoin Core
I created a multisignature address in regtest:
ADDR_1=`bitcoin-cli getnewaddress "" "bech32"`
ADDR_2=`bitcoin-cli getnewaddress "" "bech32"`
PB1=$(bitcoin-cli -...
- 1,004
0
votes
0
answers
44
views
Sign a multi-signature transaction with imported address
I have an address with three compressed public keys:
SCRIPT="5221"$(cat compressed_public_key_1.txt)"21"$(cat compressed_public_key_2.txt)"21"$(cat ...
- 1,004
3
votes
2
answers
196
views
Which hardware wallets require importation of PSBT for knowledge of multisig set up?
My understanding of a multi-vendor multisig is that certain wallets require importation of the resultant multisig wallet's PSBT information in order to sign multisig transactions. Coldcard's ...
- 339
0
votes
0
answers
30
views
Can I use 2 individual private keys to spend from my Bip32 HD 2 or 2 multisig?
Example keys are fake:
If I build a 2 of 2 in Sparrow or any Bip32 Determ wallet, with P2WSH native segwit, and ONLY send funds to the very FIRST receiving address:
m/48'/0'/0'/2'/0/0: ...
- 1
1
vote
1
answer
146
views
Is the signature check performed when the signature is the empty vector?
In this answer Vojtěch Strnad wrote the following:
OP_CHECKSIGADD always performs one check per signature, since unused
public keys are required to be paired with an empty witness item and
are ...
- 309
1
vote
1
answer
173
views
What are the all benefits/advantages of OP_CHECKSIGADD over OP_CHECKMULTISIG?
What are all the benefits of introducing OP_CHECKSIGADD in Taproot instead of OP_CHECKMULTISIG?
I assume the first benefit is the following.
For example, in pre-taproot approach, if we have 3-of-10 ...
- 309
2
votes
1
answer
123
views
What would happen if we provide to OP_CHECKMULTISIG more than threshold number (m) of signatures?
Asked here but still no answer.
What would happen if we provide to OP_CHECKMULTISIG opcode more than threshold number (m) of signatures?
For example, if the m = 3 and n = 6 and the output script is:
3 ...
- 309
0
votes
1
answer
106
views
What's the point of Multi Signature Addresses?
When an attacker has access to the private key of the wallet, he can dump the private keys of every address used for the multisign address(es).
So, what's the point of multi sign addresses when there'...
- 3
4
votes
1
answer
448
views
Is the Schnorr digital signature scheme a multisignature interactive scheme, and also not an aggregated non-interactive scheme?
In his answer Pieter Wuille defined a concepts of multisignature scheme and aggregated signature scheme as follows:
A multisignature scheme is a scheme where multiple parties jointly produce a ...
- 990
1
vote
1
answer
302
views
How to get signature for tweaked public key in P2TR in case of multiple signature?
EDIT: Can we just tweak the signature with the root MAST as well?
As I understand, the public key in scriptPubKey for P2TR is obtained by tweaking (let's call it original public key) and the root of ...
- 990
3
votes
1
answer
116
views
What are the privacy implications of multsig wallets if one half is compromised?
I am trying to work out the privacy implications of the following scenario. Alice and Bob have a multisig wallet together (say Electrum but it doesn't really matter). Alice's computer is somehow ...
- 313
2
votes
1
answer
78
views
How to find out if public keys have been used in other transactions
When we get the public keys from a multisig script is there a way to check what other transactions use those public keys?
I know how to check if they have been used as P2PKH addresses, but I'm not ...
- 313
5
votes
2
answers
477
views
Why are n public keys needed for reconstitution of an x of n multisig?
Trying to conceptually understand why I must store the public keys of the n hardware wallets in an x of n multisig set up? Only x of the seed phrases/private keys are needed to reconstitute/recover ...
- 339
0
votes
1
answer
28
views
From where can I download a precompiled Windows installable Bitcoin core with support of hardware wallet for BitBox02
I wanted to integrate my BitBox02 into the existing Bitcoin Core Version v24.0.1 on my Windows 10 laptop.
In the customization menu I receive the notice that this node does not contain the hardware ...
1
vote
1
answer
316
views
Should different brands of hardware wallets be used in multisig setups?
Is there genuinely a compelling reason to use different brands of hardware wallets in multisig setups? I am contemplating using a series of Coldcard hardware wallets in a multisig setup but some ...
- 171