Questions tagged [x-only-pubkeys]
A serialization for public keys that only encodes the x-coordinate introduced by BIP340.
9
questions
1
vote
1
answer
70
views
Is it possible to calculate the correct y coordinate from x coordinate given only x coordinate without any prefix
If I have a x coordinate without any prefix such as 03 or 02
fff97bd5755eeea420453a14355235d382f6472f8568a18b2f057a1460297556
will it be possible to compute the correct y coordinate that would be ...
- 13
0
votes
0
answers
80
views
How does tweaking work for x-only keys, and what is not good in the example I gave?
How does normal key tweaking work in case of Schnorr digital signature schemes?
For all examples I am using online tool for point multiplication and point addition. (I suggest you to use them if it is ...
- 536
0
votes
2
answers
100
views
How to get x-only public key from the private key, and what does the obtained value represent?
In ECDSA, the public key is the result of multiplying the private key (some random 256-bit value) with a generic point (G). So the public key would be one of the points (X,Y) of the elliptic curve ...
- 536
3
votes
0
answers
26
views
Should an even Y coordinate be enforced after every key-tweak operation, or only at the end?
This is a very niche question regarding BIP340 and key tweaking with even-only public keys.
I feel my question may be a matter of opinion, since there doesn't appear to be an accepted right / wrong ...
- 31
6
votes
2
answers
858
views
Is a P2TR address a compressed public key?
From what I understand, a public key can be compressed from 64 bytes into 32 bytes, but an additional byte is needed for the sign, so it usually winds up being 33 bytes total. But P2TR addresses only ...
- 249
4
votes
1
answer
161
views
How does the BIP340 lift_x algorithm work?
Couple questions of code that I'm reviewing trying to learn schnorr sigs.
Why do we want an odd private key? I see even tests on the private key and then subtract it from the SECP256K1 Order to get an ...
- 331
1
vote
1
answer
163
views
What would happen if you tweaked a public key with an odd y-coordinate?
From BIP341 this example code shows how you can tweak an x-only pubkey:
def taproot_tweak_pubkey(pubkey, h):
t = int_from_bytes(tagged_hash("TapTweak", pubkey + h))
if t >= ...
- 779
2
votes
1
answer
338
views
Will taproot change public key generation?
Does taproot change how private/public keys/addresses are generated, or just how the transactions are signed? Also, I'd appreciate if someone could recommend me where to look for official sources of ...
- 55
6
votes
2
answers
394
views
Why is no security lost by using 32-byte public keys in Schnorr signatures instead of 33?
There is currently a discussion on the mailing list about truncating the 33rd byte from public keys when used in bip-schnorr.
Public keys are (x, y) coordinates and compressed public keys simply ...
- 4,992