Skip to main content
37 votes
Accepted

The Bitcoin.it wiki says addresses do not carry balances...but all info suggests otherwise

The wiki is correct, it is a technicality. Bitcoin "balances" are actually just unspent transaction outputs (UTXOs, from previous transactions) which you have the ability to spend. In most cases, that ...
meshcollider's user avatar
  • 11.9k
33 votes
Accepted

What are the potential attacks against ECDSA that would be possible if we used raw public keys as addresses?

The theory It is assumed that in order to forge an ECDSA signature you need to compute the private key for a given public key first (this operation is known as the "discrete logarithm" (DL), ...
Pieter Wuille's user avatar
22 votes

How do you send to multiple addresses by paying a one time fee? Which wallet supports this?

TL;DR: Just read the second paragraph of "Concrete Numbers". Wallet Recommendation: Electrum Doing this in Electrum is very simple. Just switch to the Send tab and then (in the menu) choose Tools → ...
UTF-8's user avatar
  • 3,224
21 votes
Accepted

How are different addresses generated from the same private key?

Private and public key correspond to a point on the secp256k1 curve. They have a one-to-one relationship. The address is derived from the public key by performing a ripemd160 hash after a sha256 hash ...
Murch's user avatar
  • 76k
21 votes
Accepted

Why is P2PKH used instead of the simpler P2PK?

The original reason why addresses were a public key hashes is something you'll need to ask Satoshi. My guess however is that it was just shorter and more convenient (note that compressed public keys ...
Pieter Wuille's user avatar
20 votes

Why do you use Bitcoin addresses instead of public keys?

Yes, you could send bitcoins directly to the public key: in fact, both Pay-to-PubKey (P2PK) and Pay-to-PubKey-Hash (P2PKH) were introduced in the first Bitcoin release. IIRC, P2PK is still used for ...
Murch's user avatar
  • 76k
16 votes
Accepted

How to create a Bech32 address from a public key?

Ok, I figured out how to do it. You need 3 pieces of information to construct the bech32 address. hrp: the human-readable part. This is bc for mainnet and tb for testnet witver: the witness version. ...
Mike D's user avatar
  • 3,569
16 votes

The Bitcoin.it wiki says addresses do not carry balances...but all info suggests otherwise

Bitcoin addresses do not actually exist on the Bitcoin network. They are an abstraction for humans to be able to easily send money to each other. What Bitcoin actually uses are transaction outputs. A ...
Ava Chow's user avatar
  • 71k
16 votes
Accepted

How do I export an xpub from Bitcoin Core for use in BTCPayServer?

This is not currently possible, as Bitcoin Core uses hardened BIP32 derivation to compute keys and addresses. This derivation scheme does not have a usable xpub that lets you derive the same keys ...
Pieter Wuille's user avatar
15 votes
Accepted

What's the difference between `z-addr` and `t-addr` type addresses?

This is now explained in the current Beta Guide: Zcash has two kinds of address: a z-addr is a fully private address that uses the zero-knowledge proving system to shield a transaction and ...
AtomHeartFather's user avatar
15 votes

Why do you use Bitcoin addresses instead of public keys?

As @Murch correctly pointed out it is indeed possible to send bitcoin to either a public key or to the hash of a public key. The original motivation for using hashes of public keys was to shorten the ...
Benedikt Bünz's user avatar
15 votes
Accepted

Why is Bitcoin address encoded in base58?

Why base-58 instead of standard base-64 encoding? Don't want 0OIl characters that look the same in some fonts and could be used to create visually identical looking account numbers. A string with ...
Tailer's user avatar
  • 3,669
14 votes

How do I protect my paper wallet from use by a different human who has used a random generator?

"Improbable" is an understatement. There are 2256 possible keys. In the entire universe, there are estimated to be "only" 2100 atoms. So the odds of someone else ending up with the exact same ...
abelenky's user avatar
  • 1,344
14 votes

Bitcoin Cash "Cash Address" format

"CashAddr" is the name of the new Bitcoin Cash address format, which is heavily influenced by SegWit Bech32 format. It looks like this: bitcoincash:qpm2qsznhks23z7629mms6s4cwef74vcwvy22gdx6a The ...
MCCCS's user avatar
  • 10.2k
13 votes

I've read that bitcoin addresses are never destroyed, but do they get recycled/reassigned?

What happens to old bitcoin addresses? I've read that they never get destroyed, but do they get reassigned? Bitcoin addresses are not reused or reassigned to anybody under any circumstances. The ...
Claris's user avatar
  • 15.4k
13 votes
Accepted

Why does Bitcoin Core support a transaction index but not an address index?

The transaction index exists because it is leftover from how Bitcoin Core used to work for validating new blocks and transactions. Prior to 0.8.0, Bitcoin Core maintained the transaction index, and ...
Ava Chow's user avatar
  • 71k
12 votes
Accepted

Why is the change address for a transaction the same as the originator address?

Many wallets let you control where to send the change. In most cases it is advisable to send to a new address to reduce traceability and increase your privacy a little, but not everyone does and ...
Fernando Gutierrez's user avatar
11 votes
Accepted

Is "1Wh4bh" a valid Bitcoin address?

As to elaborate on why this is accepted at all at blockchain.info, 1Wh4bh is: >>> import base58 >>> bytes.hex(base58.b58decode('1Wh4bh')) '001406e058' Following https://en....
circulosmeos's user avatar
11 votes
Accepted

Can you create empty Bitcoin transactions?

Yes, it is possible and allowed by the consensus rules to create 0 value outputs. Such outputs can even be spent. However such outputs are also non-standard and thus transactions with 0 value outputs ...
Ava Chow's user avatar
  • 71k
10 votes

How are different addresses generated from the same private key?

With Bitcoin, a single private key will have associated compressed and uncompressed private/public key pairs. Uncompressed public key addresses are larger in size than newer compressed public ...
skaht's user avatar
  • 3,077
10 votes
Accepted

Can I send bitcoin to other address in my wallet to provide anonymity?

Let's assume you're the outside observer. You see 1 BTC go from aaa to bbb, then from bbb to ccc, then from ccc to ddd, and them from ddd to zzz (zzz being associated with service Z). Can you see how ...
UTF-8's user avatar
  • 3,224
10 votes
Accepted

Replacing ECDSA (SECP256k1) with Schnorr signatures

Schnorr will replace ECDSA, the signing algorithm, but both still use the same elliptic curve and thus the same public and private keys, etc. Regardless, compatibility with ECDSA must be kept too ...
meshcollider's user avatar
  • 11.9k
10 votes

How does a wallet get the public key from an address?

Perhaps you're confused by the phrasing "the wallet", as it's only the receiver's wallet who needs to know the public key, and he has it, because he created the address in the first place. ...
Pieter Wuille's user avatar
10 votes
Accepted

Why do compressed and uncompressed public keys have to produce different addresses?

My question is: Why cant you just uncompress the compressed public key (effectively making it an uncompressed public key) and then derive the address. That way even if you use the compressed key, ...
Pieter Wuille's user avatar
9 votes

How to get the Public Keys of a bitcoin User

You cannot compute the public key of an address (that is not yours), because the address is computed from the hash of the public key. You can find the public key of your own address with the Bitcoin-...
Susan's user avatar
  • 245
9 votes

How are different addresses generated from the same private key?

Whenever you are attempting to explain Bitcoin to anyone, it makes a lot of sense to simply state that the derivation private key > public key > address is deterministic. However, if you are ...
Sven Williamson's user avatar
9 votes

What can be changed in signed bitcoin transaction?

Here is the list of known sources of malleability from BIP62 (which has been withdrawn, and is no longer up to date, but does give some insight): DER encoded ECDSA signatures Right now, the Bitcoin ...
Pieter Wuille's user avatar
9 votes
Accepted

Electrum addresses start with "b"

These are native SegWit addresses, specified in BIP173 using a format called Bech32. They begin with 'bc1'. Addresses that begin with a 3 are P2SH addresses, an address format that has been around ...
Pieter Wuille's user avatar
9 votes

Is "1Wh4bh" a valid Bitcoin address?

No, it is not valid as explained here: A Bitcoin address, or simply address, is an identifier of 26-35 alphanumeric characters, beginning with the number 1 or 3, that represents a possible ...
Gabriel's user avatar
  • 191

Only top scored, non community-wiki answers of a minimum length are eligible