Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 208
4 votes

Should an even Y coordinate be enforced after every key-tweak operation, or only at the end?

This is a question for designers of cryptographic schemes/protocols which use BIP340 signatures as a building block. If you are only implementing an existing scheme, then hopefully these choices are a …
Pieter Wuille's user avatar
2 votes
Accepted

Do we need a taproot commit for multisignatures if there is no script path, but we are using...

Is there any need for addition key tweaking if we use MuSig2 protocol for multisignature? Citing BIP341: Why should the output key always have a taproot commitment, even if there is no script path? …
Pieter Wuille's user avatar
2 votes
Accepted

How to get signature for tweaked public key in P2TR in case of multiple signature?

To sign for an aggregated public key you need to run the respective collaborative signing protocol (e.g. if you use MuSig2 key aggregation to aggregate the keys, you need to run the MuSig2 signing pro …
Pieter Wuille's user avatar
5 votes

Is tweak used when spending from script path for Taproot?

You perform tweaking at signing time if the key you're signing for was tweaked. That's a decision that was made when the output was constructed, not when it is spent. Taproot outputs can consist of: …
Pieter Wuille's user avatar
7 votes
Accepted

How to tweak a public key for Taproot

That's exactly right. Compute the tweak H(P||c), compute the "public key" corresponding to that tweak, and then add (elliptic curve point addition) the internal public key with that tweak public key.
Pieter Wuille's user avatar
3 votes
Accepted

Can you use un-tweaked public key with P2TR?

It depends on what you mean by public key. P2TR outputs encode an "x-only pubkey", that is a public key with just the X coordinate. The Y coordinate is implicitly the even one (on elliptic curve like …
Pieter Wuille's user avatar
4 votes
Accepted

Why don't add salt to the tapscript in Taproot?

In general this shouldn't be a concern, as every script almost certainly contains at least a public key, and you can use fresh public keys in every branch. If you're still concerned about privacy of t …
Pieter Wuille's user avatar
1 vote

Retweaking other person's or my own taproot address

BIP341 recommends tweaking even public keys which have no intended script path, with a dummy tweak. This prevents certain attacks (though none relevant in your scenario). You can tweak an existing pu …
Pieter Wuille's user avatar