3 ms·
Too bad Bitcoin uses ECDSA instead of Ed25519 (or any other signature algorithm supporting threshold signatures). With threshold signatures, you don't even nee
by KMag 9y ago
Too bad Bitcoin uses ECDSA instead of Ed25519 (or any other signature algorithm supporting threshold signatures). With threshold signatures, you don't even need something in the wallet saying "any N of the following M", you could just give secret shares to those M parties, and any N of them could collaborate to sign something using your single public key.
- glitch003 9y agoYou could just do that anyway by running Shamir's Secret Sharing Scheme on a Bitcoin private key, splitting the key into M parts where any N of M parts can be combined to recover the original private key.
- KMag 9y agoThat's a fair point, but threshold signatures are more generally useful, such as N of M board members authorizing payment to X, without having to place trust in a single board member not to change the transaction to a different amount or address.