Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with key-tweaking
Search options answers only
not deleted
user 208
7
votes
Accepted
How to tweak a public key for Taproot
That's exactly right.
Compute the tweak H(P||c), compute the "public key" corresponding to that tweak, and then add (elliptic curve point addition) the internal public key with that tweak public key.
- 110k
5
votes
Is tweak used when spending from script path for Taproot?
You perform tweaking at signing time if the key you're signing for was tweaked. That's a decision that was made when the output was constructed, not when it is spent.
Taproot outputs can consist of:
…
- 110k
4
votes
Accepted
Why don't add salt to the tapscript in Taproot?
In general this shouldn't be a concern, as every script almost certainly contains at least a public key, and you can use fresh public keys in every branch.
If you're still concerned about privacy of t …
- 110k
4
votes
Should an even Y coordinate be enforced after every key-tweak operation, or only at the end?
This is a question for designers of cryptographic schemes/protocols which use BIP340 signatures as a building block. If you are only implementing an existing scheme, then hopefully these choices are a …
- 110k
3
votes
Accepted
Can you use un-tweaked public key with P2TR?
It depends on what you mean by public key.
P2TR outputs encode an "x-only pubkey", that is a public key with just the X coordinate. The Y coordinate is implicitly the even one (on elliptic curve like …
- 110k
2
votes
Accepted
How to get signature for tweaked public key in P2TR in case of multiple signature?
To sign for an aggregated public key you need to run the respective collaborative signing protocol (e.g. if you use MuSig2 key aggregation to aggregate the keys, you need to run the MuSig2 signing pro …
- 110k
2
votes
Accepted
Do we need a taproot commit for multisignatures if there is no script path, but we are using...
Is there any need for addition key tweaking if we use MuSig2 protocol for multisignature?
Citing BIP341:
Why should the output key always have a taproot commitment, even if there is no script path? …
- 110k
1
vote
Retweaking other person's or my own taproot address
BIP341 recommends tweaking even public keys which have no intended script path, with a dummy tweak. This prevents certain attacks (though none relevant in your scenario).
You can tweak an existing pu …
- 110k