Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [x-only-pubkeys]

A serialization for public keys that only encodes the x-coordinate introduced by BIP340.

Filter by
Sorted by
Tagged with
0 votes
1 answer
66 views

Computing HASH160 of a Taproot X-only 32 byte Public Key

I know that Taproot does not use pubkey hashes, but I want to compute a HASH160 of a 32 byte Taproot X-only public key anyway. The rationale is to compare it to an existing 20 byte HASH160 from a ...
Alec Matusis's user avatar
1 vote
1 answer
137 views

Is it possible to calculate the correct y coordinate from x coordinate given only x coordinate without any prefix

If I have a x coordinate without any prefix such as 03 or 02 fff97bd5755eeea420453a14355235d382f6472f8568a18b2f057a1460297556 will it be possible to compute the correct y coordinate that would be ...
Zetock's user avatar
  • 13
0 votes
0 answers
121 views

How does tweaking work for x-only keys, and what is not good in the example I gave?

How does normal key tweaking work in case of Schnorr digital signature schemes? For all examples I am using online tool for point multiplication and point addition. (I suggest you to use them if it is ...
LeaBit's user avatar
  • 950
0 votes
2 answers
282 views

How to get x-only public key from the private key, and what does the obtained value represent?

In ECDSA, the public key is the result of multiplying the private key (some random 256-bit value) with a generic point (G). So the public key would be one of the points (X,Y) of the elliptic curve ...
LeaBit's user avatar
  • 950
3 votes
0 answers
34 views

Should an even Y coordinate be enforced after every key-tweak operation, or only at the end?

This is a very niche question regarding BIP340 and key tweaking with even-only public keys. I feel my question may be a matter of opinion, since there doesn't appear to be an accepted right / wrong ...
cmdruid's user avatar
  • 31
6 votes
2 answers
1k views

Is a P2TR address a compressed public key?

From what I understand, a public key can be compressed from 64 bytes into 32 bytes, but an additional byte is needed for the sign, so it usually winds up being 33 bytes total. But P2TR addresses only ...
Hunter Beast's user avatar
4 votes
1 answer
188 views

How does the BIP340 lift_x algorithm work?

Couple questions of code that I'm reviewing trying to learn schnorr sigs. Why do we want an odd private key? I see even tests on the private key and then subtract it from the SECP256K1 Order to get an ...
Kaizen's user avatar
  • 331
1 vote
1 answer
245 views

What would happen if you tweaked a public key with an odd y-coordinate?

From BIP341 this example code shows how you can tweak an x-only pubkey: def taproot_tweak_pubkey(pubkey, h): t = int_from_bytes(tagged_hash("TapTweak", pubkey + h)) if t >= ...
Darius's user avatar
  • 789
2 votes
1 answer
377 views

Will taproot change public key generation?

Does taproot change how private/public keys/addresses are generated, or just how the transactions are signed? Also, I'd appreciate if someone could recommend me where to look for official sources of ...
abianchessi's user avatar
6 votes
2 answers
465 views

Why is no security lost by using 32-byte public keys in Schnorr signatures instead of 33?

There is currently a discussion on the mailing list about truncating the 33rd byte from public keys when used in bip-schnorr. Public keys are (x, y) coordinates and compressed public keys simply ...
pinhead's user avatar
  • 5,154