4 ms·

Thanks, that was very clear. Question though: why is it called Taproot?

• ddtaylor 5y ago
  I think because it's like an iceberg analogy where you see only the small surface area, but underneath there is a complex web of conditions (roots)
• nullc 5y ago
  It's sort of a joke that works on two levels: One is that if you imagine the probability-of-usage weighed tree over the DNF form of your script, taproot is most efficient and private if most the probability mass is clustered along a central path-- like a botanical taproot-- particularly the "all participants agree" case that almost always exists. The other when you spend using one of the hidden scripts, you tap into the public key to expose a hash tree root hash. But really, the name exists because easier to talk about stuff when you have a name for it, the idea long predates having a formal spec for the construction, and taproot was the name I picked. Today we could also call it BIP341.