scriptless-scripts
scriptless-scripts copied to clipboard
ElementsProject
Documentation about scriptless scripts
Need to update rest of the multi-hop-locks text before undrafting this and also mention how taproot plays into this. I wonder if there are situations where you'd really prefer 2-of-2...
Fixes #23. Turns out it's not that easy to specify adaptor signatures for multisignatures while keeping a healthy balance between clarity and complexity. Perhaps that's why I haven't found an...
Since [MuSig2](https://eprint.iacr.org/2020/1261) is very similar to its predecessor, it's straightforward to use adaptor signatures as before. The version of adaptor signatures as used in the multi-hop locks (aka PTLCs) [writeup](https://github.com/ElementsProject/scriptless-scripts/blob/master/md/multi-hop-locks.md)...
Currently the term adaptor signature is defined as a triplet `(s', R, T)` satisfying ``` s'G = T + R + H(P || R || m)P ``` However, multi hop...
This is a high level summary and description of the partially blind swap protocol. It was discussed in person with @jonasnick and @AdamISZ. It does not cover the nuances of...
@LLFourn came up with a much simpler protocol for buying the opening of a Pedersen Commitment than what we currently have: https://github.com/LLFourn/buying-pedersen-commitment/blob/master/main.pdf. Instead of complicated range proof recovery he uses...
Thank you for the thorough description of PTLCs in https://github.com/BlockstreamResearch/scriptless-scripts/blob/master/md/multi-hop-locks.md. My question is if the multi hop lock scheme would still work as intended if the partial signatures of the...
I think you can do a scriptless commitment as follows: * Take any random transaction you're going to sign (possibly via musig). * Generate the (public) nonce for it, ie...
The atomic swap was missing the step of validating the adaptor signature. IMHO, This should be added as otherwise it would be misleading to readers who seek education on this...
