Chain Code Delegation: Private Access Control for Bitcoin Keys

Nice, clean algebra, no magic :sweat_smile:

Love how the validation works out cleanly:

P_i = P + t_i * G
s_i * G = R + e * P_i
s_i = s + e * t_i = r + e * (x + t_i)

Meaning the signature remains valid even after tweaking the public key with t_i, thanks to the linearity of Schnorr

1 Like