Questions tagged [taproot]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
13
votes
1answer
602 views

Musig Signature Interactivity

2 Questions: Why is Musig signing always interactive? Let's say I have a Musig wallet where keys are stored in secure locations with no internet access. What are some methods to sign from these ...
8
votes
1answer
1k views

Why does Taproot require a new address format?

Dawid Ciężarkiewicz asked on Twitter: Hey #bitcoin ers. I'm trying to figure out why taproot needs a new address format, as I missed it. If you have a good link or something - please share. I thought ...
8
votes
1answer
230 views

In theory could we skip the proposed Taproot soft fork, activate Simplicity instead and use Simplicity to write the equivalent of Taproot scripts?

In theory could we skip the proposed Taproot soft fork, activate Simplicity instead and use Simplicity to write the equivalent of Taproot scripts? Or does Simplicity need more development and ...
7
votes
1answer
226 views

What are the different upgradeability features in the BIP-Taproot (BIP 341) proposal?

What are the different upgradability features in the BIP-Taproot (BIP 341) proposal? Why are there so many upgradability paths? Is there something an annex can do that a leaf version can't? This ...
6
votes
1answer
1k views

Should I be worried that bitcoincore.org now suddenly only provides an “unsigned” Bitcoin Core installer?

My security script for downloading and verifying new versions of Bitcoin Core barked at me the other day, when the new v0.21.1 was released. (Which still is nowhere to be found on bitcoin.org, BTW.) ...
6
votes
3answers
526 views

What are Merklized Alternative Script Trees?

I have seen the acronym MAST floating around. I saw that it stands for Merklized Alternative Script Trees, but what does that mean? In what context do they appear and what can they be used for?
5
votes
2answers
117 views

What kind of privacy does Taproot give bitcoin?

I understand that confidential transactions hide the amounts sent and received. But what does the new taproot privacy technology hide for bitcoin?
4
votes
2answers
807 views

Will “Taproot” replace Lightning Network?

Can somebody explain to me if Taproot will fix the issues that Lightning Network solves, without the Lightning Network? That is, near-zero fees, privacy and fast settlements? Will Taproot allow me to ...
4
votes
3answers
392 views

What are some interesting applications of Taproot “smart contracts”?

From a strictly technical perspective, MAST makes a lot of sense. However, understanding it in the context of Taproot/Tapscript does require prior knowledge in Merkle Trees and hash functions. What ...
4
votes
1answer
214 views

What are the sizes of single-sig and 2-of-3 multisig taproot inputs?

There was a Twitter discussion about the sizes of inputs and Taproot came up. What are the input sizes for Taproot inputs? Please cover both the key path spend (single-sig or default spend) and 2-of-...
4
votes
2answers
241 views

On chain cost of Segwit version 1 versus version 0

How do total blockchain cost for Segwit version 0 compare to version 1 which is being proposed? I'm specifically interested in a single user transactions – both paying to public key (or pk hash) and ...
4
votes
1answer
132 views

Does v1 Segwit includes v0?

My question is whether the version 1 of Segwit script will allow you to use version 0 scripts types inside of it. In other words, is version 1 superset of version 0? Please include reasoning behind ...
4
votes
1answer
238 views

I keep hearing about MAST, what is it and what does it do?

So, somebody asked me about MAST yesterday. Apparently, it's formalized in BIP114 – Merkelized Abstract Syntax Trees. I couldn't explain what it was and what advantages it'll bring us. What are ...
4
votes
1answer
287 views

Activation of SegWit v1

The segregated witness soft fork of August 2017 included a versioning field which would allow for future incrementation. Anthony Towns has recently posted an early draft of the proposal for the SegWit ...
4
votes
0answers
39 views

How are taproot scripts represented in general?

I'm pretty familiar with the opcode style of writing down scripts. I can understand the stack-based language nature of bitcoin script where you can write down different script spend paths via ifs like ...
3
votes
2answers
141 views

Why is no security lost by using 32-byte public keys in Schnorr signatures instead of 33?

There is currently a discussion on the mailing list about truncating the 33rd byte from public keys when used in bip-schnorr. Public keys are (x, y) coordinates and compressed public keys simply ...
3
votes
2answers
145 views

What are “leaf versions” in Taproot?

What are "leaf versions", when do you upgrade a version, how many versions are there and how do they differ from segwit versions?
3
votes
1answer
194 views

Would a Schnorr PubKey be a different length than a Taproot PubKey like P2WPKH and P2WSH?

A P2WPKH PubKey is shorter than a P2WSH PubKey. Would this also be the case that a Taproot PubKey is larger than a Schnorr PubKey? If so, wouldn't people be incentivised to use the Schnorr PubKey and ...
3
votes
1answer
249 views

I would like to dig into the open Taproot PR to understand it, test it and possibly even review it. Any advice or recommendations?

I would like to dig into the open Taproot PR (PR #19953) to understand it, test it and possibly even review it. Any advice or recommendations?
3
votes
1answer
449 views

What makes cross input signature aggregation complicated to implement?

What makes cross input signature aggregation complicated to implement? Other than for design space reasons why didn't it make it into BIP-Taproot? (Key aggregation within one input can be achieved ...
3
votes
1answer
220 views

Is the BCH version of Schnorr signatures compatible with taproot?

BCH is going to introduce support for Schnorr signatures on May 15th. One of the most anticipated features for Schnorr signatures on Bitcoin is the introduction of taproot constructions. Will it be ...
3
votes
1answer
93 views

What is the current Status of major proposed BTC upgrades like Taproot, MAST, Submarine Swaps?

I have read during the last year about some very interesting BIPs or initiatives. I am not asking for their explanations, just would be great if anyone would know about their simple status as of now, ...
3
votes
1answer
197 views

Does Taproot allow CoinJoin-style transactions without revealing all signers?

Taproot allows to hide a script behind a transaction and only release the relevant information when the output is being spent. Would this allow for a construction of a script with N participants + ...
3
votes
1answer
166 views

What are the risks of a lower-than-95% activation threshold for soft forks (particularly SegWit)?

95% seems exceptionally conservative, especially given the evidence of vetoing by a subset of Bitcoin miners. What risks does, say, 60% over a longer activation period hold vs 95% for SegWit?
3
votes
0answers
73 views

Taproot block version

In block 681543 Slush Pool had mined the proper taproot signalling (bit 2 in block version) block but the version wasn't the default 0x20000004 with a version base 0x20000000 but 0x3fff0004. Does it ...
2
votes
2answers
377 views

Could Taproot create larger security risks or even hinder future protocol adjustments re Quantum threats?

I am quoting here a user named "blk014" who responded to Pieter's Taproot tweets from 24JAN. I find this user's comments very interesting and would like to ask a developer expert how much of a ...
2
votes
2answers
95 views

Given OP_VER was never used, is disabled and not considered useful can its meaning be stripped and it be made OP_SUCCESS?

Given OP_VER (0x62) was never used onchain, is disabled and is not considered useful can its meaning be stripped and it be made OP_SUCCESS for the purposes of introducing a new different opcode in ...
2
votes
1answer
275 views

How can I follow the progress of miner signaling for Taproot activation during the Speedy Trial deployment?

How can I follow the progress of miner signaling for Taproot activation during the Speedy Trial deployment? Can I use bitcoin-cli to track the signaling progress? This was asked by pox on Mastodon and ...
2
votes
1answer
53 views

Will g'root be included in the Taproot soft-fork?

G'root, which I understands as generalised Taproot, was announced a year and a half ago. I'm wondering what the development is on it and if it is part of the taproot softfork.
2
votes
1answer
147 views

What problems identified with bech32 addresses have been resolved with the updated bech32m?

What problems identified with bech32 addresses have been resolved with the updated bech32m? I am aware of one problem with the original bech32, namely length extension mutation weakness but I don't ...
2
votes
1answer
25 views

How to calculate Tapscript sigops budget?

Sigops limits have been changed to budget in Tapscript. BIP341 defines the budget calculation method as follows. The budget equals 50 + the total serialized size in bytes of the transaction input's ...
2
votes
1answer
65 views

Are P2SH transactions with disabled opcodes relayed/mined?

Many OPCODES like OP_AND, OP_CAT, OP_SUBSTR are disabled as described in https://en.bitcoin.it/wiki/Script. Although, with Bitcoin Core 0.10.0 Gavin Andresen proposed "any Script" in P2SH ...
2
votes
1answer
52 views

Who will the first adopters of Taproot be (assuming it is activated at some stage)? What incentives are there to start using it straight away?

Adoption of SegWit by users and companies after it was activated was slow. Should we expect adoption of Taproot to be slow also (assuming it is activated at some stage)? Who will the first adopters of ...
2
votes
1answer
101 views

Can we experiment on Signet with multiple proposed soft forks whilst maintaining the ability of full nodes to validate the Signet chain?

One of the goals of Signet is to test proposed soft forks before they are activated on mainnet. Not only does this mean proposed soft forks such as Taproot that at the time of writing (August 2020) ...
1
vote
1answer
85 views

Can Taproot be used to commit arbitrary data to chain without any additional footprint?

A common way of committing some data to the chain is through an OP_RETURN with some hash. Doing this marks an output unspendable, but the output still requires some footprint (and cost) on the chain ...
1
vote
1answer
41 views

Broadcasting deprecated block version

With the recent addition of Binance to the group of miners who will accept taproot, I wonder what would happen if despite a total of more than 99% of the network accepting it, a miner still doesn't ...
1
vote
1answer
110 views

I'm digging further into the open Taproot PR. Can you explain the bip340_test_vectors?

I'm digging further into the open Taproot PR. I found these bip340_test_vectors. They have secret keys, public keys, aux_rand (auxiliary randomness), message, signature and whether the signature ...
1
vote
1answer
37 views

Why does the threshold apply to the MUST_SIGNAL phase in revised BIP 8 (lot=true)? Why doesn't it enforce 100 percent signaling?

BIP 8 states that: During the MUST_SIGNAL phase, if (2016 - threshold) blocks in the retarget period have already failed to signal, any further blocks that fail to signal are invalid. Why doesn't it ...
1
vote
1answer
69 views

How long has it taken for BIP-Taproot to go from draft specification to activation?

It seems BIP-Taproot has been discussed for years now. How long has it taken to go from draft specification to potential activation?
1
vote
1answer
27 views

BLS signature verification?

Is it possible to perform BLS signature verification with upcoming Taproot/Tapscript proposal?
1
vote
1answer
61 views

Taproot - Eliminating Key Path

I want to struct a transaction output the key-path of which I want to be eliminated, so enforcing only the script path. In order to eliminate key-path, in my opinion, I should set "Internal ...
1
vote
1answer
56 views

Could CHECKSIGADD be used on new ECDSA multisignatures instead of CHECKMULTISIG?

The proposed Taproot soft fork (BIP 342) defines the new opcode OP_CHECKSIGADD to verify Schnorr multisignatures whilst OP_CHECKMULTISIG (and OP_CHECKMULTISIGVERIFY) are disabled for Taproot spends (...
1
vote
1answer
108 views

Could Taproot or Graftroot enable the execution of complex scripts?

From my understanding, Taproot uses a Merkle Tree structure whose root represents the outcome of a script. That representation is in the form of a signature that may unlock the inputs associated with ...
1
vote
0answers
47 views

Can Submarine Swaps be incorporated into a Taproot/Scriptless script?

I was looking for ideas on how to use Submarine Swaps with Taproot/Scriptless Scripts. But I couldn't find anything. I can imagine that it would trivially be possible to incorporate a Submarine Swaps ...
0
votes
1answer
126 views

Who would benefit from Taproot deployment?

In the discussion of activation parameters for Taproot, a Bitcoin Core contributor stated that "Taproot would only benefit 5% of the users" citing that it would especially benefit complex ...
0
votes
1answer
32 views

Is there already reached consensus on network upgrades like Taproot, Submarine Swaps?

I have read about some very interesting new protocol amendments. I am not asking for their explanations, but would be great if anyone explained their current status, if they are still considered to ...
0
votes
1answer
40 views

Advanced math operations in TapScript?

Hence BIP 342 proposes to enable opcodes like OP_MOD, OP_DIV, OP_MUL is it possible to perform advanced math operations like EC point addition/multiplication in a script size of up to 10kB?
0
votes
1answer
75 views

If I delay upgrading to the latest Bitcoin Core version post Taproot activation does my node ever verify early Taproot spends?

Let's assume the Taproot soft fork is activated in June 2021. I continue to run an old version of Bitcoin Core (not enforcing Taproot rules) in July 2021 and so my full node treats valid Taproot ...
0
votes
0answers
24 views

Using key aggregation (multsig) in P2TR script path spends

I know that it is possible to create a 2-2 multsig using Taproot by combining both private keys into one public key and defining that as the key path spend. I also know that it is possible to use ...
0
votes
1answer
89 views

Taproot and Large multisigs

I have seen lot of people saying that taproot is only for large multisigs used in few projects or companies. BlueMatt mentioned similar thing in last Taproot activation meeting: 13:01 < BlueMatt&...