Reducing Bitcoin Transaction Sizes with x-only Pubkeys

How to securely save four weight units per output with BIP-schnorr



compressed public keys

What is the purpose of the tie breaker?

Purpose of tie breaker
x-only pubkeys in BIP-schnorr
Why can we remove the tie breaker?

Why introduce x-only pubkeys?

Why x-only?

Proof sketch

Proof sketch model of the forger
Proof sketch outline
Proof sketch case 1
Proof sketch case 2
Proof sketch resolution


BIP-schnorr and BIP-taproot are slowly maturing from the draft status to the proposal status. We’re looking for feedback, so feel free to read the BIPs, implement them, or play with implementations of BIP-schnorr and BIP-taproot. Very good resources for learning more about the BIPs are this Jupyter notebook from the Optech Taproot workshop and the Taproot Review Club.



Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store

Blockstream is the global leader in Bitcoin & blockchain technology, making financial markets more efficient by reducing reliance on trust.