Tweaking tapscript instead of public key [combined summary]



Individual post summaries: Click here to read the original discussion on the bitcoin-dev mailing list

Published on: 2021-05-23T17:58:13+00:00


Summary:

In a question posed on the Bitcoin-dev mailing list, the possibility of modifying a Taproot output without changing its address is discussed. The response clarifies that while a P2TR address contains a 32-byte public key that can be used for creating Schnorr signatures or revealing tapscript, changing the spending conditions would require a commitment to be made. Specifically, the Taproot equation Q = P + hash(P||m)*G is mentioned, where P is hashed together with the message to create a commitment. If the message is altered, a different commitment would be generated, thereby preventing modifications to the spending conditions without moving the on-chain coins.It is noted that a P2TR address encompasses a 32-byte public key, which can be directly used for generating Schnorr signatures or indirectly utilized by revealing tapscript. This prompts the question of whether it is possible to modify any taproot output after confirmation without altering the address. It is suggested that the owner could potentially make use of the base point private key associated with the P2TR address tb1p0xlxvlhemja6c4dqv22uapctqupfhlxm9h8z3k2e72q4k9hcz7vqqzj3dz to modify spending conditions without needing to move the on-chain coins.For further details and reference, the original Taproot thread is provided as a linked resource.


Updated on: 2023-08-02T03:54:39.702426+00:00