Derivation Paths for Single Key Taproot Scripts



Summary:

Andrew Chow proposed a derivation path scheme for keys to be used in Taproot scripts. The suggested scheme is based on BIP 44 and will have the purpose level path m/86' once assigned a BIP number. The derived keys should be for the Taproot internal key and then tweaked with the hash of itself as recommended by BIP 341. These keys should not be used directly as the Taproot output pubkey, and no new version bytes for extended key serialization are specified in this BIP since descriptors eliminate the need for it. Although Andrew feels that this BIP is somewhat unnecessary, it seems like it will be needed to drive adoption and implementation of Taproot into software and hardware wallets. The proposed derivation scheme aims to provide HD wallets with a common scheme to recover single key Taproot outputs. It consists of two steps to derive multiple deterministic addresses based on a BIP 32 master private key. The first step uses the same account-structure as defined in BIPs 44, 49, and 84 but with a different purpose value for the script type. The second step derives the output key used in the P2TR script from the derived public key using the method recommended in BIP 341.This BIP is not backwards compatible by design. An incompatible wallet will not discover these accounts at all, and the user will notice that something is wrong. However, since the proposed method is similar to the one used in BIPs 44, 49, and 84, it should not be difficult to implement. The document includes references to BIPs 32, 43, 44, 49, 84, and 341. The BIP is licensed under the 2-clause BSD license, and the text can be viewed on GitHub.


Updated on: 2023-05-21T02:49:26.314896+00:00