Questions tagged [multi-signature]

Multi-signature addresses require m-of-n signatures to authorize spending funds sent to them.

Filter by
Sorted by
Tagged with
2 votes
2 answers
65 views

Can one infer that a bc1 address is multisig?

Studying privacy and security implications of revealing if a bc1 address belongs to a multisig wallet vs a regular wallet. I do notice that multisig bc1 addresses are longer than regular ones… P2WSH (...
0 votes
2 answers
70 views

How does SpeedyMuSig compare to MuSig2?

This paper (Crites, Komlo, Maller) on the security of Schnorr multisig and threshold signature schemes introduces a new variant of MuSig2 called SpeedyMuSig that includes proofs of possession and ...
3 votes
2 answers
653 views

How much does the weight of 2-of-3 multisignature inputs differ between P2SH and P2SH-P2WSH?

I'm trying to calculate the weight of a 2-of-3 multisignature P2SH-P2WSH input. I found the related question Predict multi signature transaction size, which I've calculated with m=2, n=3 here: ...
1 vote
1 answer
34 views

Optimistic Multisigs

I had an idea for an optimistic multisig scheme. In a 2/2 multisig where pubkey1 could spend any time and pubkey2 could only spend after a future block number, could you have a condition that allowed ...
0 votes
1 answer
170 views

Verify that WIF corresponds with bip32 extended public key

I have a bip38 encrypted private key that I lost the password to, and I have its corresponding extended public key. I want to brute force passwords as I have an idea of what it might be, but I need to ...
3 votes
2 answers
71 views

How many addresses can be generated from a ranged descriptor?

I'm trying to wrap my head around ranged descriptors. The docs in the bitcoin/bitcoin-repo says that a ranged descriptor can generate keys/address "in a configurable range (0-1000 by default)&...
0 votes
1 answer
85 views

Setting Up Multisig Correctly

I'm looking into setting up a multisig setup using sparrow, and wanted to see if anyone can find any flaws in my set up, and potentially accessing my funds if I lose a key. set up = 2 of 3 Key store 1 ...
1 vote
2 answers
36 views

Review of multisig funds protection strategy

I want to protect my bitcoin and my threat model is that one of the two paper copies of the seed is accessed to recover the wallet and steal the funds. To mitigate this risk I am contemplating the ...
0 votes
1 answer
177 views

How to use Multisig feature on Bitcoin Core RPC in an online exchange?

I've craeted a small online exchange based on Bitcoin Core. The features in this application are: User send request to get a new address, and the Bitcoin Core generate a new one with defined ...
0 votes
1 answer
19 views

Why does only one of the two nonce points in MuSig2 have the exponent b?

In MuSig2 R''_i is added to itself b times (in multiplicative notation, it has the exponent b) but R'_i is not (it does not have the exponent b). Why does only one of the nonce points have the ...
2 votes
1 answer
94 views

Where can I get some MuSig2 test vectors?

I am writing a MuSig2 library and need some test vectors. This should include the hash functions used.
0 votes
1 answer
290 views

ScriptSig raw hex to sign raw tx

i have a p2sh address that is created using an uncompressed public key (from my ledger nano) and a compressed public key (bitcoincore wallet). It requires both signatures to send the funds. When i use ...
1 vote
1 answer
36 views

Multisig with existing single sig + passphrase

If I take 2 brand new HW wallets (like a Coldcards), plus an existing hw single sig wallet that has a passphrase and finds already assigned to it (like a Trezor)and then create a new multisig 2 of 3 ...
1 vote
2 answers
65 views

Multisig synchronization

I understand what the multisig wallets are but I need help understanding what exactly this script does: https://gist.github.com/gavinandresen/3882537 If I understand correctly, bitcoinds are bitcoin ...
0 votes
1 answer
28 views

How does the CHECKSIGADD opcode work? How does it compare to its predecessor CHECKMULTISIG?

How does the CHECKSIGADD opcode (defined in the Tapscript BIP) BIP342 work? How does it compare to its predecessor CHECKMULTISIG? The design of CHECKSIGADD was discussed in this StackExchange question....
2 votes
1 answer
93 views

Why does `OP_CHECKSIGADD` allow TAPROOT keyspends?

My understanding is this sig version is only for taproot keyspends, why is it allowed to be used in OP_CHECKSIGADD? https://github.com/bitcoin/bitcoin/blob/e826b22da252e0599c61d21c98ff89f366b3120f/src/...
4 votes
2 answers
331 views

Why do invalid signatures in OP_CHECKSIGADD not push to the stack?

I've been working through the static test vectors provided by bitcoin core to implement an interpreter. Some surprising behavior I found was that in the case of OP_CHECKSIGADD, if an invalid signature ...
1 vote
1 answer
135 views

Could CHECKSIGADD be used on new ECDSA multisignatures instead of CHECKMULTISIG?

The proposed Taproot soft fork (BIP 342) defines the new opcode OP_CHECKSIGADD to verify Schnorr multisignatures whilst OP_CHECKMULTISIG (and OP_CHECKMULTISIGVERIFY) are disabled for Taproot spends (...
0 votes
1 answer
57 views

How do MuSig2 and FROST compare for multisig key aggregation schemes?

Although FROST is primarily for threshold (k-of-n, k<n) key aggregation schemes (and MuSig2 doesn't support threshold) FROST can support multisig (n-of-n) key aggregation. So what are the upsides ...
5 votes
1 answer
219 views

What is the largest multisig quorum currently possible?

Bitcoin script allows for a UTXO to be (un)encumbered by an N-of-N signature. When N is 1, this is referred to as a single signature. What are the limits of N for this application? What is the ...
1 vote
1 answer
43 views

Extracting forkcoins from legacy multisig Copay wallet

In 2017, we made an m-out-of-n multisignature wallet in the Copay app. After this time, several forks have arisen. Bitpay, the successor of Copay, does have built in support for Bitcoin Cash (BCH), ...
0 votes
1 answer
369 views

What is the difference between P2SH redeem script on Bitcoin and on Litecoin?

I am building a service that is based on multisig wallets. My current progress is so that I've implemented the multisigs for Bitcoin network and it works fine. Now I am on Litecoin and I am facing ...
0 votes
1 answer
36 views

Bitcoin multisig scheme that prevents theft by middle-man operator

Background I'm considering building a service that allows participants in my industry to strike OTC deals with each other using my centralized matchmaking service. The deals always involve two players,...
2 votes
0 answers
549 views

Creation of P2SH MultiSig Input Script

In the createP2SHMultiSigInputScript() function of BitcoinJ according to this: public static Script createP2SHMultiSigInputScript(@NullableList signatures,Script multisigProgram) Create a program ...
1 vote
1 answer
26 views

Import Bitcoin core pubkey into Electrum for multisig setup

Background I have a service running on a server using bitcoin core that is signing transactions from a Bitcoin wallet automatically. However, if anyone were to get access to this server, they'd have ...
0 votes
1 answer
58 views

how to test decryption of shared seed for a multisig vault

I used the script from this post How to derive the private key associated with a Coinbase multi-sig vault address To get the Master Private Key, Extended Private key at index 14, and WIF format of ...
0 votes
1 answer
64 views

Create a 2-3 multisig address without syncing entire blockchain

I have a hardware wallet, a seed, and a specific private key. I want to create a 2-of-3 multisig using these 3 items. So the only option left is the option of creating a multisig using just private ...
2 votes
2 answers
97 views

Can you do P2WSH / P2SH on Lightning Network (LN)?

I understand that a channel is a 2 of 2 multisig: 1 && 1 Is it possible that one side of this channel is a multisig wallet? So in essence one of the 2 main, is actually a 2 of 3 multisig. ...
0 votes
2 answers
49 views

Multisig with oracle

I am trying to develop an use case in which a user has its funds on a multisig 3-2 (one key staying with him, another with my app and another one with a type of oracle that can attest if some ...
1 vote
0 answers
47 views

nunchuk.io - "To create new wallets, additional XPUBs from the key are needed."

I'm trying to start using Nunchuk (nunchuk.io), so I created 3 software keys on 3 different devices for my account, and then was able to create a wallet using those 3 keys as signers. But when I try ...
2 votes
2 answers
3k views

Difference between createmultisig and addmultisigaddress?

What is the functional difference between createmultisig and addmultisigaddress in bitcoincore (v 0.10)? To be clear, I understand how both function. ie. multisigCmd n ["address1 public key as hex", ...
2 votes
0 answers
30 views

How to use bitcoin multisig to prioritize one of the parties?

Normally when you use OP_CHECKMULTISIG you're basically setting up something like x-of-y, where any x of the y key holders can carry out a transaction. I want to know, if you can repurpose this ...
1 vote
1 answer
152 views

Can't sign using Trezor T derived multisig wallet using Electrum | Invalid script_type

I created a P2WSH multisig wallet using Electrum 4.0.9 using a single Trezor T, to which I sent a large amount of BTC. Electrum allowed me to set up the wallet using the same device when I used two ...
0 votes
1 answer
127 views

Multisig Setup - Pruned Bitcoin Core on Computer vs. Dedicated Hardware

Are there security implications of running a pruned Bitcoin Core node on a personal computer vs. a full Bitcoin Core node on a dedicated hardware device (i.e. Raspberry Pie with Umbrel, myNode, nodl, ...
1 vote
1 answer
43 views

Order of Signatures in Multisig-Scheme

3 Entities (A/B/C) create a collaborative Multisig Wallet (e.g. 2-of-3). A creates an unsigned TX and shares it with B/C. They (B/C) sign and broadcast. Looking at the TX on the network, can A make ...
1 vote
1 answer
56 views

Is weighed multi-sig wallet possible?

In a multi-sig wallet, each of the public keys is unique. Is it possible to create weighted multi-sig wallet, such that one private key has more power than the others? Case 1: typical Example (need 2 ...
4 votes
1 answer
191 views

Why isn't `OP_CHECKMULTISIG` compatible with batch verification of schnorr signatures?

BIP342 defines OP_CHECKSIGADD as a replacement for OP_CHECKMULTISIG. In the footnote it's mentioned that OP_CHECKMULTISIG is not compatible with batch verification, but I can't understand why and I ...
0 votes
1 answer
35 views

Can multisig wallet can be fooled by adding one more key?

Please consider this scenario. I agree with other party that we will create 2/2 multisig wallet, so we can only spend funds from that wallet together. The other party will create its wallet, generates ...
0 votes
0 answers
21 views

Can you give me an example of a P2MS tx at testnet?

I am checking on the test net before applying current update. I'd like to check P2MS, which is "bare multisig," and I'd like to know the testnet transactionID of this. Or is there an ...
1 vote
1 answer
156 views

Is this scheme for multisig audit of Trezor + Coldcard ok?

My plan is to make a multisig between coldcard and trezor. I want to audit and verify that I indeed own the 2 keys of these wallets, using a raspberry pi zero (no wifi/bluetooth by definition) on a ...
1 vote
1 answer
658 views

Is it possible to use Electrum to create a multisig wallet with a trezor and an airgapped coldcard?

I set up a 2-of-3 multisig using Electrum, a Trezor, and a Coldcard. During testing, I ran into issues using the Coldcard to sign. My approach: (On Electrum) File -> New/Restore -> Multi-signature ...
2 votes
1 answer
73 views

How do bonds in Secure Multi‐Party Lotteries work as described in Bitcoin and Cryptocurrency Technologies book

I have understood the details of it but I have a question related to claiming the bond. We have two parties Alice and Bob and suppose the bond that Alice signs is now if Alice reveals her value X ...
2 votes
1 answer
124 views

Check if multiple signatures match a specifc public key

Suppose you have a company which has three main leaders called A, B and C also the company have 5 shareholders called S1 to S5. The decision rule for spending any coin from company's address is to ...
0 votes
1 answer
577 views

Restore Block.io multisig wallet in Electrum

I've exported my private keys from Block.io. They're compressed WIF keys (starting with L...). Additionally I've got the following data from Block.io: Address type: P2SH (obviously) Redeem script ...
0 votes
0 answers
43 views

Create signature for raw bitcoin transaction by hand using Swift

I have a bitcoinWalletAddress in bitcoin testnet (starting with tb1) publicKey already in hex format privateKey in P2WPKH format looking like cTS... By following this guide and this one I created ...
2 votes
1 answer
542 views

How can I recover last word of BIP-32/39 mnemonic copay second signature multisig wallet

I've got a multisig 2of2 wallet in copay. I've one wallet correct but have lost second wallet and only have 11 of the 12 words of the seed.I'm pretty sure I miss the last one. I've got some of the ...
0 votes
1 answer
123 views

Difference between createmultisig and addmultisigaddress on v 0.20.0?

What is difference between createmultisig and addmultisigaddress? I ran 2 methods for 2 same bitcoin address on bitcoin-cli but gives different addresses as multisig to me. the results are as follows: ...
0 votes
0 answers
13 views

Question about multisigs with 2p-ecdsa

Is it possible to create more than 2 party multisigs using the 2P-ecdsa trick for cheaper and more private outputs? I'm assuming no, because ab * G is non-linear, whereas Schnorr would make this ...
0 votes
2 answers
91 views

CLI tool like Bitcoin Explorer (bx) for BIP85? multisig?

Looking for a CLI tool like Bitcoin Explorer (bx) that will generate multiple seeds/mnemonics from a single entropy string, as per BIP85 Also one that allows for a decent multisig scheme? Or if not ...
1 vote
1 answer
45 views

What will be the security risks if we persist "e" as part of schnorr signature=(r,s,e) and extract publicKey from signature at verification

We know unlike ecrecover, it is impossible to get to public key given schnorr signature = (r,s) since rG = sG-eP . So, would like to understand what are the security risks, if we say signature=F(r,s,e)...

1
2 3 4 5
10