RFC for a BIP32 recurrent address derivation scheme



Summary:

In an email thread on the bitcoin-dev mailing list, El_Hoy proposed a scheme that would make it possible to send recurring payments using a single offline interaction. The proposed scheme follows the structure described in BIP44 and is as follows: master / purpose' / coin_type' / contact' / index. Bob could use the public key generated from Carol's contact address to make multiple recurring payments to her; the contact address is stored off-chain, and anyone inspecting the chain will just see normal transactions on-chain. The proposed scheme has a positive side effect of giving more privacy to Bob by allowing him to choose to send payments to Carol using multiple outputs. Ruben Somsen responded to this proposal agreeing with the general assessment that this is a scheme that seems like an improvement over the status quo. However, Ruben noted that both BIP47 and Silent Payments don't require any interaction with the sender, while this scheme requires one-time interaction, making it not suitable for one-time donations. In addition, Ruben raised concerns about how "contact" is defined and the potential exponential blowup in gap limits if each xpub is allowed to have its own gap limit. It may be necessary to define a low default gap limit for these xpubs and be explicit about how they are used to derive addresses for others.


Updated on: 2023-06-16T00:24:17.241084+00:00