Signatures and cryptography
The mathematics under the signatures: secp256k1 and libsecp256k1, deterministic nonces, strict DER (BIP 66), signature aggregation, adaptor signatures, discreet log contracts and the zero-knowledge ideas that come and go.
155 threads and 1,109 messages, 20 Oct 2012 to 24 Sep 2026.
Read on LearnBitcoin
BIPs
Bitcoin Optech
The threads, in order
Listed by the date of each thread's first message.
2012 2 threads
- Public key and signature malleability Pieter Wuille6 messages
- 4 messages
2013 6 threads
- WebCryto standard to support secp256r1 but not secp256k1 Melvin Carvalho2 messages
- Tor and Bitcoin Bazyli Zygan9 messages
- 1 message
- 0.8.5 with libsecp256k1 Warren Togami6 messages
- Web Crypto -- Named Curve Dictionary (adding secp256k1) Melvin Carvalho1 message
- 2 messages
2014 7 threads
- An idea for alternative payment scheme Nadav Ivgi6 messages
- 7 messages
- 24 messages
- Bug in 2-of-3 transaction signing in Bitcoind? Matt Whitlock10 messages
- cryptographic review requested Mem Wallet4 messages
- Named Curve Registry (adding secp256k1) Melvin Carvalho3 messages
- one-show signatures (Re: The relationship between Proof-of-Publication and Anti-Replay Oracles) Adam Back3 messages
2015 10 threads
- Strict DER signatures Pieter Wuille32 messages
- More precise type information in API reference Dario Teixeira4 messages
- PAPER: New algorithm for the discrete logarithm problem on elliptic curves Jean-Paul Kogelman4 messages
- Miners: You'll (very likely) need to upgrade your Bitcoin Core node soon to support BIP66 Peter Todd3 messages
- 17 messages
- Bitcoin Core 0.11.0 released Wladimir J. van der Laan4 messages
- 5 messages
- 10 messages
- Disclosure: consensus bug indirectly solved by BIP66 Pieter Wuille4 messages
- If you had a single chance to double the transactions/second Bitcoin allows... Sergio Demian Lerner11 messages
2016 5 threads
- The first successful Zero-Knowledge Contingent Payment Gregory Maxwell6 messages
- Proposal to update BIP-32 Jochen Hoenicke9 messages
- Mimblewimble: non-interactive coinjoin, signature aggregation and confidential transactions Bryan Bishop1 message
- New BIP: Low S values signatures Johnson Lau5 messages
- 3 messages
2017 7 threads
- Flag day activation of segwit shaolinfry10 messages
- Lightning in Scriptless Scripts Bryan Bishop1 message
- 4 messages
- Rolling UTXO set hashes Pieter Wuille10 messages
- 2 messages
- Updates on Confidential Transactions efficiency Gregory Maxwell6 messages
- 3 messages
2018 12 threads
- Taproot: Privacy preserving switchable scripting Gregory Maxwell25 messages
- Design approaches for Signature Aggregation Russell O'Connor2 messages
- Transition to post-quantum Tristan Hoy12 messages
- Post-Schnorr lightning txes Bryan Bishop1 message
- Soft-forks and schnorr signature aggregation Anthony Towns8 messages
- MAST/Schnorr related soft-forks Anthony Towns4 messages
- Schnorr signatures BIP Pieter Wuille31 messages
- BLS library released Bram Cohen3 messages
- Multisignature for bip-schnorr nakagat5 messages
- 1 message
- Multi party Schnorr Rust implementation Omer Shlomovits5 messages
- Schnorr and taproot (etc) upgrade Anthony Towns6 messages
2019 5 threads
- 7 messages
- 32-byte public keys in Schnorr and Taproot Pieter Wuille3 messages
- Storm: escrowed storage and messaging at L2/L3 Dr Maxim Orlovsky8 messages
- 8 messages
- Ring VS Schnorr signatures Casciano, Anthony1 message
2020 16 threads
- Discreet Log Contract Protocol Specification Chris Stewart3 messages
- Taproot (and graftroot) complexity Bryan Bishop16 messages
- 7 messages
- 7 messages
- Overview of anti-covert-channel signing techniques Pieter Wuille10 messages
- Schnorr sigs vs pairing sigs Erik Aronesty2 messages
- Statechain implementations Tom Trevethan25 messages
- 13 messages
- Design for a CoinSwap implementation for massively improving Bitcoin privacy and fungibility Chris Belcher22 messages
- Blind Statechains Tom Trevethan3 messages
- 4 messages
- 24 messages
- Revisiting squaredness tiebreaker for R point in BIP340 Pieter Wuille6 messages
- Is BIP32's chain code needed? Leonardo Comandini5 messages
- 2 messages
- BIP proposal: Elliptic SSS scheme Egor Zuev1 message
2021 7 threads
- Libre/Open blockchain / cryptographic ASICs Luke Kenneth Casson Leighton13 messages
- Update on DLCs (new mailing list) Nadav Kohen1 message
- BIP32/43-based standard for Schnorr signatures & decentralized identity Dr Maxim Orlovsky10 messages
- 2 messages
- PSA: Taproot loss of quantum protections Luke Dashjr29 messages
- An alternative to BIP 32? vjudeu9 messages
- Bitcoin-s 1.8 released with DLCs negotiation via Tor Chris Stewart1 message
2022 14 threads
- BIP proposal: Pay-to-contract tweak fields for PSBT (bip-psbt-p2c) Dr Maxim Orlovsky3 messages
- CTV dramatically improves DLCs Lloyd Fournier11 messages
- Recurring bitcoin/LN payments using DLCs Chris Stewart8 messages
- bitcoin scripting and lisp Bram Cohen17 messages
- Transcript: Sydney Socratic on FROST w/ Jesse Posner Michael Folkson1 message
- Online Socratic on MuSig2 and biweekly secp256k1 IRC meeting Michael Folkson1 message
- Zero-knowledge proofs e.g. Schnorr are incompatible with address signing without compromise Ali Sherief4 messages
- Regarding BIP322 edge cases Ali Sherief7 messages
- More uses for CTV James O'Beirne6 messages
- 2 messages
- 6 messages
- 1 message
- Silicon Salon 3: Call for Presentations On Silicon-Logic-Base Cryptographic Acceleration & New Algorithms Christopher Allen1 message
- libsecp256k1 version 0.2.0 released Pieter Wuille1 message
2023 12 threads
- Using OP_VAULT to improve DLCs Ben Carman2 messages
- libsecp256k1 v0.3.1 released Pieter Wuille1 message
- Civ Kit: A Peer-to-Peer Electronic Market System Antoine Riard4 messages
- 8 messages
- 8 messages
- libsecp256k1 0.3.2 released Tim Ruffing1 message
- Private Collaborative Custody with FROST Nick Farrow3 messages
- libsecp256k1 v0.4.0 released Pieter Wuille1 message
- BitVM: Compute Anything on Bitcoin Robin Linus6 messages
- Proposed BIP for MuSig2 PSBT Fields Ava Chow5 messages
- Examining ScriptPubkeys in Bitcoin Script Rusty Russell8 messages
- libsecp256k1 v0.4.1 released Jonas Nick1 message
2024 13 threads
- 23 messages
- libsecp256k1 v0.5.0 released Tim Ruffing1 message
- 10 messages
- 4 messages
- 1 message
- OP_ZKP updates Weiji Guo5 messages
- Mining pools, stratumv2 and oblivious shares Anthony Towns8 messages
- BIP Draft: "FROST Signing" Sivaram D2 messages
- OP_CAT Research Fund sponsored by StarkWare Victor Kolobov5 messages
- Adaptor generalisation waxwing/ AdamISZ1 message
- 3 messages
- libsecp256k1 v0.6.0 released Jonas Nick1 message
- Trivial QC signatures with clean upgrade path Matt Corallo12 messages
2025 19 threads
- 17 messages
- P2QRH / BIP-360 Update Hunter Beast19 messages
- ESSPI: ECDSA/Schnorr Signed Program Input for BitVMX Sergio Demian Lerner1 message
- 3 messages
- 15 messages
- Introducing Hourglass Hunter Beast9 messages
- jpeg resistance of various post-quantum signature schemes Bas Westerbaan5 messages
- A Post Quantum Migration Proposal Jameson Lopp25 messages
- libsecp256k1 v0.7.0 released Tim Ruffing1 message
- 5 messages
- FROST Signing for Bitcoin: Demo + Taproot Integration Discussion @ Aug 6 Gordian Call Christopher Allen1 message
- Quantum-Resistant Transition Framework for Bitcoin Bitcoin Foundation9 messages
- Elliptic Curve Operations for Bitcoin Script Olaoluwa Osuntokun3 messages
- FROST CLI + BDK CLI Demo Christopher Allen1 message
- A Bitcoin Scripting Proposal BIP Quartet Rusty Russell10 messages
- On (in)ability to embed data into Schnorr waxwing/ AdamISZ19 messages
- OP_CIV - Post-Quantum Signature Aggregation Tadge Dryja5 messages
- 17 messages
- 3 messages
2026 20 threads
- 4 messages
- Falcon Post-Quantum Signature Scheme Proposal Giulio Golinelli13 messages
- libsecp256k1 0.7.1 released Pieter Wuille1 message
- BIP-352: Limiting the number of per-group recipients (K_max) Sebastian Falbesoner4 messages
- The limitations of cryptographic agility in Bitcoin Pieter Wuille16 messages
- Pay to Schnorr Key Hash (P2SKH) sashabeton17 messages
- 10 messages
- 2 messages
- Post-Quantum BIP-86 Recovery via zk-STARK Proof of BIP-32 Seed Knowledge Olaoluwa Osuntokun18 messages
- Benchmarking SLH-DSA STARK Aggregation remix75312 messages
- Deactivating ECDSA/Schnorr Erik Aronesty10 messages
- A Post-Quantum Path for BIP 324 Olaoluwa Osuntokun8 messages
- A "Quantum-Agile" Bitcoin address proposal Jason Resch5 messages
- 2 messages
- Weak Quantum Bounty Ceremony Erik Aronesty7 messages
- Informational BIP on Low-R Signature Grinding Sean Gilligan4 messages
- Giving teeth to expected EC disabling: P2XX(-T)(-ML) Pieter Wuille22 messages
- 8 messages
- libsecp256k1 v0.8.0 released Sebastian Falbesoner1 message
- 7 messages