📅 Original date posted:2021-03-19
📝 Original message:Hi Craig,
For multisignature wallets, you need to back up the descriptor anyway, especially for secure multisignature schemes (https://github.com/nunchuk-io/bips/pull/1).
To restore, the user needs M private key data, and all public keys. The descriptor provides the required public key data, with the benefit of key origin information and error detection, and tells the wallet which script to watch.
So I see this proposal as a clear gain for multisignature wallets, as it (1) gets rid of redundant data in the key record, (2) separates keys/scripts, (3) makes full use of descriptors, and (4) prevents key reuse.
>>If one has the threshold and all the cosigner seeds, the funds in a multisig wallet can very likely be discovered by checking one of a handful of standard derivation paths/script types
Old scenario: You have BIP39 words (I assume). You try BIP 45 - search 20 addresses on the first 5 accounts. Then try BIP 48 - search 20 addresses on the first 5 accounts with script type 1 (P2SH-P2WSH); then search 20 addresses on the first 5 accounts with script type 2 (P2WSH).
New scenario: Should have a descriptor, and you just do what it says.
If you don't, you have to search the `address_index` for each script. The moment funds are found, you know that script type is the only script type used for that `account'` level. Increment `account'`, and repeat.
Robert
Personal Fingerprint: BF0D 3C08 A439 5AC6 11C1 5395 B70B 4A77 F850 548F
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Friday, March 19, 2021 3:54 AM, Craig Raw <craigraw at gmail.com> wrote:
> Hi Robert,
>
> I believe many of the same concerns apply in multisig. If one has the threshold and all the cosigner seeds, the funds in a multisig wallet can very likely be discovered by checking one of a handful of standard derivation paths/script types. Is the motivation of this BIP proposal strong enough to lose this capability?
>
> Craig
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20210319/65e55d6b/attachment.html>;
Robert Spigler [ARCHIVE] /
npub1jv…n4h4q
2023-06-07 18:30:47
in reply to nevent1q…taqf
Author Public Key
npub1jvdxs20huh95a9c3870fexu3t9l75ewathejfupw26r7n3uh847shn4h4qPublished at
2023-06-07 18:30:47Event JSON
{
"id": "54243c33011baa87fcab19c7170a657f774a7d2cb589cf2ac07fec0bddc317e0",
"pubkey": "931a6829f7e5cb4e97113f9e9c9b91597fea65dd5df324f02e5687e9c7973d7d",
"created_at": 1686162647,
"kind": 1,
"tags": [
[
"e",
"913d86f3b70d7097b85745228f5bcf5ab314d109dd3d1e78a2db64c8151cf10d",
"",
"root"
],
[
"e",
"43540cacba55f329139bfbd5756b81d58f3ec7dc97885a63d9865236bbedd0de",
"",
"reply"
],
[
"p",
"03111b3dcac4508bd5dcda221b0b2b4e419292ae403c6a77a615481933a12b2d"
]
],
"content": "📅 Original date posted:2021-03-19\n📝 Original message:Hi Craig,\n\nFor multisignature wallets, you need to back up the descriptor anyway, especially for secure multisignature schemes (https://github.com/nunchuk-io/bips/pull/1).\n\nTo restore, the user needs M private key data, and all public keys. The descriptor provides the required public key data, with the benefit of key origin information and error detection, and tells the wallet which script to watch.\n\nSo I see this proposal as a clear gain for multisignature wallets, as it (1) gets rid of redundant data in the key record, (2) separates keys/scripts, (3) makes full use of descriptors, and (4) prevents key reuse.\n\n\u003e\u003eIf one has the threshold and all the cosigner seeds, the funds in a multisig wallet can very likely be discovered by checking one of a handful of standard derivation paths/script types\n\nOld scenario: You have BIP39 words (I assume). You try BIP 45 - search 20 addresses on the first 5 accounts. Then try BIP 48 - search 20 addresses on the first 5 accounts with script type 1 (P2SH-P2WSH); then search 20 addresses on the first 5 accounts with script type 2 (P2WSH).\n\nNew scenario: Should have a descriptor, and you just do what it says.\n\nIf you don't, you have to search the `address_index` for each script. The moment funds are found, you know that script type is the only script type used for that `account'` level. Increment `account'`, and repeat.\n\nRobert\n\nPersonal Fingerprint: BF0D 3C08 A439 5AC6 11C1 5395 B70B 4A77 F850 548F\n\n‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐\nOn Friday, March 19, 2021 3:54 AM, Craig Raw \u003ccraigraw at gmail.com\u003e wrote:\n\n\u003e Hi Robert,\n\u003e\n\u003e I believe many of the same concerns apply in multisig. If one has the threshold and all the cosigner seeds, the funds in a multisig wallet can very likely be discovered by checking one of a handful of standard derivation paths/script types. Is the motivation of this BIP proposal strong enough to lose this capability?\n\u003e\n\u003e Craig\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20210319/65e55d6b/attachment.html\u003e",
"sig": "5129d84d140341a55118a2861fbd6b19a13914376058b09c540e99a572c35e957dad16bd4ebc5dc0f6075894e01d09e5d5df1e34e62f04736d0ec5976f58ab69"
}