Evidence · DiggingBeagle record
BIP 340: Schnorr Signatures for secp256k1
Bitcoin technical specification for secp256k1 Schnorr signatures and 32-byte x-only public keys. Its design section explains the 128-bit classical security target and why x-only encoding does not remove discrete-log security requirements.
- Source role
- primary disclosure
Evidence record
Bitcoin technical specification for secp256k1 Schnorr signatures and 32-byte x-only public keys. Its design section explains the 128-bit classical security target and why x-only encoding does not remove discrete-log security requirements.
Claim-level citations (1)
- supportsCan AI recover a wallet private key? The proof that is still missing: Bitcoin P2WPKH outputs use a 20-byte HASH160 commitment and reveal the public key in their spending witness, whereas Taproot key-path spending uses Schnorr signatures for 32-byte x-only secp256k1 points.
BIP 340, Introduction and Description: Schnorr for secp256k1 and x-only public-key encoding