Taproot and Schnorr
Schnorr signatures (BIP 340) and Taproot (BIPs 341 and 342) were the first consensus change after SegWit. A Taproot output can be spent with one aggregated key or by revealing one branch of a script tree, and either way it looks the same. Discussed from 2018, activated in November 2021.
270 threads and 2,846 messages, 12 Mar 2017 to 19 Sep 2026.
Read on LearnBitcoin
BIPs
Bitcoin Optech
The threads, in order
Listed by the date of each thread's first message.
2017 3 threads
- Flag day activation of segwit shaolinfry10 messages
- 4 messages
- Block compression Jeff Johnson4 messages
2018 14 threads
- Taproot: Privacy preserving switchable scripting Gregory Maxwell25 messages
- 9 messages
- Post-Schnorr lightning txes Bryan Bishop1 message
- Soft-forks and schnorr signature aggregation Anthony Towns8 messages
- MAST/Schnorr related soft-forks Anthony Towns4 messages
- Should Graftroot be optional? Pieter Wuille21 messages
- SIGHASH2 for version 1 witness programme Johnson Lau10 messages
- Schnorr signatures BIP Pieter Wuille31 messages
- Multiparty signatures Erik Aronesty26 messages
- Multisignature for bip-schnorr nakagat5 messages
- Safer sighashes and more granular SIGHASH_NOINPUT Pieter Wuille55 messages
- Multi party Schnorr Rust implementation Omer Shlomovits5 messages
- Safer NOINPUT with output tagging Johnson Lau29 messages
- Schnorr and taproot (etc) upgrade Anthony Towns6 messages
2019 24 threads
- Predicate Tree in ZkVM: a variant of Taproot/G'root Oleg Andreev OOO2 messages
- Pre BIP: Solving for spam and other abuse with an HTLB Alistair Mann6 messages
- More thoughts on NOINPUT safety Anthony Towns19 messages
- Taproot proposal Pieter Wuille24 messages
- SIGHASH_ANYPREVOUT proposal Anthony Towns4 messages
- 27 messages
- An alternative: OP_CAT & OP_CHECKSIGFROMSTACK Russell O'Connor16 messages
- Safety of committing only to transaction outputs Johnson Lau3 messages
- OP_SECURETHEBAG (supersedes OP_CHECKOUTPUTSVERIFY) Jeremy Rubin17 messages
- 7 messages
- Generalized covenants with taproot enable riskless or risky lending, prevent credit inflation through fractional reserve Tamas Blummer44 messages
- 31 messages
- 32-byte public keys in Schnorr and Taproot Pieter Wuille3 messages
- Storm: escrowed storage and messaging at L2/L3 Dr Maxim Orlovsky8 messages
- bip-tapscript resource limits Pieter Wuille1 message
- 8 messages
- Continuing the discussion about noinput / anyprevout Christian Decker36 messages
- Taproot updates Pieter Wuille1 message
- 1 message
- Ring VS Schnorr signatures Casciano, Anthony1 message
- Bech32 weakness and impact on bip-taproot addresses Pieter Wuille16 messages
- Composable MuSig ZmnSCPxj10 messages
- Signing CHECKSIG position in Tapscript Russell O'Connor6 messages
- Non-equal value CoinJoins. Opinions. Adam Ficsor9 messages
2020 23 threads
- New tool to assist in BIP 340-342 review: tap Karl-Johan Alm1 message
- Taproot (and graftroot) complexity Bryan Bishop16 messages
- LN & Coinjoin, a Great Tx Format Wedding Antoine Riard8 messages
- 7 messages
- 6 messages
- 7 messages
- Overview of anti-covert-channel signing techniques Pieter Wuille10 messages
- Hash function requirements for Taproot Lloyd Fournier5 messages
- Schnorr sigs vs pairing sigs Erik Aronesty2 messages
- 13 messages
- 13 messages
- 6 messages
- Design for a CoinSwap implementation for massively improving Bitcoin privacy and fungibility Chris Belcher22 messages
- 8 messages
- Blind Statechains Tom Trevethan3 messages
- Taproot activation discussion Steve Lee1 message
- Thoughts on soft-fork activation Anthony Towns3 messages
- 4 messages
- Implementing Investment Aggregation ZmnSCPxj3 messages
- Revisiting squaredness tiebreaker for R point in BIP340 Pieter Wuille6 messages
- reviving op_difficulty Thomas Hartman13 messages
- Taproot (and graftroot) complexity Jay Berg2 messages
- 2 messages
2021 55 threads
- Hardware wallets and "advanced" Bitcoin features Kevin Loaec5 messages
- 1 message
- Yesterday's Taproot activation meeting on IRC Michael Folkson1 message
- Taproot activation meeting 2 - Tuesday 16th February 19:00 UTC Michael Folkson3 messages
- BIP32/43-based standard for Schnorr signatures & decentralized identity Dr Maxim Orlovsky10 messages
- Yesterday's Taproot activation meeting on lockinontimeout (LOT) Michael Folkson42 messages
- Taproot NACK LORD HIS EXCELLENCY JAMES HRMH36 messages
- 7 messages
- Taproot activation facts on lockinontimeout (LOT) Michael Folkson1 message
- Straight Flag Day (Height) Taproot Activation Matt Corallo15 messages
- LOT=False is dangerous and shouldn't be used Luke Dashjr9 messages
- Yesterday’s UASF (LOT=true) kick off meeting Michael Folkson3 messages
- Making the case for flag day activation of taproot Chris Belcher15 messages
- Supermajority then simple majority Taproot Activation Ariel Lorenzo-Luaces1 message
- Taproot activation proposal "Speedy Trial" David A. Harding16 messages
- Taproot: What are you building? Jeremy Rubin1 message
- Yet another Taproot activation logic Carlo Spiller3 messages
- 9 messages
- 9 messages
- PSA: Taproot loss of quantum protections Luke Dashjr29 messages
- (Recurring) Taproot activation meeting on IRC - Tuesday 23rd March 19:00 UTC + every fortnight Jeremy Rubin3 messages
- March 23rd 2021 Taproot Activation Meeting Notes Jeremy Rubin13 messages
- Announcing a new standard for soft fork activation Michael Folkson3 messages
- 12 messages
- 2 messages
- Prediction Markets and Bitcoin Prayank4 messages
- Update on "Speedy" Trial: The circus rolls on Michael Folkson6 messages
- Taproot activation meeting on IRC - Tuesday 13th April 19:00 UTC BitcoinMechanic4 messages
- Yesterday's Taproot activation meeting on IRC Michael Folkson1 message
- Update on Taproot activation releases Michael Folkson1 message
- Taproot Activation Meeting 4/20 Cancelled Jeremy Rubin2 messages
- 2 messages
- 3 messages
- Consensus protocol immutability is a feature Raystonn .9 messages
- 2 messages
- 19 messages
- BIP proposal: Anti-fee-sniping protection with nSequence in taproot transactions to improve privacy for off-chain protocols Chris Belcher4 messages
- Taproot Fields for PSBT Andrew Chow8 messages
- Derivation Paths for Single Key Taproot Scripts Andrew Chow4 messages
- CHECKSIGFROMSTACK/{Verify} BIP for Bitcoin Jeremy Rubin31 messages
- 2 messages
- 8 messages
- 5 messages
- TAPLEAF_UPDATE_VERIFY covenant opcode Anthony Towns17 messages
- Test cases for Taproot signature message Giacomo Caironi5 messages
- Inherited IDs - A safer, more powerful alternative to BIP-118 (ANYPREVOUT) for scaling Bitcoin Jeremy Rubin5 messages
- bitcoin-java, a new bitcoin library Humberto Marcolino4 messages
- Taproot testnet wallet Andreas Schildbach5 messages
- On the regularity of soft forks Michael Folkson13 messages
- BIP341 test vectors for wallet implementations Pieter Wuille1 message
- Neutrino, Taproot, and The Evolution of BiPs 157/158 Olaoluwa Osuntokun2 messages
- Taproot activates - A time/block line Michael Folkson2 messages
- 5 messages
- Take 2: Removing the Dust Limit Jeremy Rubin8 messages
- Decentralized Coordination Free Mining Pools Jeremy Rubin21 messages
2022 52 threads
- Stumbling into a contentious soft fork activation attempt Michael Folkson20 messages
- 3 messages
- CTV BIP review Luke Dashjr12 messages
- Highlighting Taproot implementation gotchas Michael Folkson1 message
- CTV dramatically improves DLCs Lloyd Fournier11 messages
- PathCoin AdamISZ7 messages
- TXHASH + CHECKSIGFROMSTACKVERIFY in lieu of CTV and ANYPREVOUT Russell O'Connor58 messages
- CTV Signet Parameters Jeremy Rubin16 messages
- 16 messages
- OP_RETURN inside TapScript vjudeu14 messages
- One testnet to rule them all vjudeu4 messages
- 9 messages
- CTV vaults in the wild James O'Beirne6 messages
- bitcoin scripting and lisp Bram Cohen17 messages
- CTV Meeting #5 Agenda (Tuesday, March 7th, 12:00 PT) Jeremy Rubin5 messages
- Speedy Trial Russell O'Connor53 messages
- 8 messages
- 6 messages
- Taro: A Taproot Asset Representation Overlay Olaoluwa Osuntokun18 messages
- MuSig2 BIP Jonas Nick15 messages
- 7 Theses on a next step for BIP-119 Jeremy Rubin11 messages
- User Resisted Soft Fork for CTV Michael Folkson18 messages
- ANYPREVOUT in place of CTV Antoine Poinsot26 messages
- What to expect in the next few weeks Michael Folkson13 messages
- Towards a means of measuring user support for Soft Forks Keagan McClelland19 messages
- 2 messages
- Conjectures on solving the high interactivity issue in payment pools and channel factories Antoine Riard7 messages
- 2 messages
- Working Towards Consensus Jeremy Rubin5 messages
- 3 messages
- Wallet policies for descriptor wallets Salvatore Ingala9 messages
- Speedy covenants (OP_CAT2) Jorge Timón19 messages
- Improving BIP 8 soft fork activation alicexbt7 messages
- 3 messages
- CTV BIP Meeting #9 Notes alicexbt5 messages
- 4 messages
- On a new community process to specify covenants Antoine Riard25 messages
- Online Socratic on MuSig2 and biweekly secp256k1 IRC meeting Michael Folkson1 message
- Zero-knowledge proofs e.g. Schnorr are incompatible with address signing without compromise Ali Sherief4 messages
- BIP-notatether-signedmessage Ali Sherief8 messages
- Regarding BIP322 edge cases Ali Sherief7 messages
- A method for BIP322 signing delegation Ali Sherief4 messages
- 3 messages
- Implementing Multisig Using Taproot Ali Sherief1 message
- 2 messages
- Transcript: Online Socratic on MuSig2 Michael Folkson3 messages
- bitcoin-inquistion: evaluating soft forks on signet Anthony Towns15 messages
- What has the Taproot Annex ever done for us ? Antoine Riard1 message
- Validity Rollups on Bitcoin John Light7 messages
- 2 messages
- Merkleize All The Things Salvatore Ingala20 messages
- Relative txout amounts with a Merkleized Sum Tree and explicit miner fee. Andrew Melnychuk Oseen3 messages
2023 34 threads
- OP_VAULT: a new vault proposal James O'Beirne16 messages
- Using OP_VAULT to improve DLCs Ben Carman2 messages
- Debate: 64 bytes in OP_RETURN VS taproot OP_FALSE OP_IF OP_PUSH Christopher Allen34 messages
- 18 messages
- 10 messages
- BIP for OP_VAULT James O'Beirne23 messages
- RGB protocol announcement Dr Maxim Orlovsky7 messages
- Vaults in the MATT framework Salvatore Ingala4 messages
- 8 messages
- 25 messages
- 6 messages
- Standardisation of an unstructured taproot annex Joost Jager30 messages
- Conceptual package relay using taproot annex Joost Jager1 message
- On the experiment of the Bitcoin Contracting Primitives WG and marking this community process "up for grabs" Antoine Riard6 messages
- Blinded 2-party Musig2 Tom Trevethan33 messages
- Concern about "Inscriptions". Léo Haf9 messages
- Blinded 2-party Musig2 Tom Trevethan1 message
- 4 messages
- segwit naming ambiguity Tobin Harding5 messages
- Combined CTV+APO to minimal TXHASH+CSFS Brandon Black4 messages
- Private Collaborative Custody with FROST Nick Farrow3 messages
- Compressed Bitcoin Transactions Tom Briar16 messages
- BIP-????: The Taproot Assets Protocol Olaoluwa Osuntokun2 messages
- New BIP to align descriptors, xpub derivation and miniscript Dr Maxim Orlovsky2 messages
- 7 messages
- BitVM: Compute Anything on Bitcoin Robin Linus6 messages
- Proposed BIP for MuSig2 PSBT Fields Ava Chow5 messages
- Proposed BIP for MuSig2 Descriptors Ava Chow2 messages
- Taproot Assets on Mainnet: Announcing tapd v0.3.0-alpha Olaoluwa Osuntokun2 messages
- Examining ScriptPubkeys in Bitcoin Script Rusty Russell8 messages
- Proposed BIP for OP_CAT Ethan Heilman20 messages
- HTLC output aggregation as a mitigation for tx recycling, jamming, and on-chain efficiency (covenants) Johan Torås Halseth5 messages
- 20 messages
- 8 messages
2024 13 threads
- 3 messages
- BIP process friction Anthony Towns11 messages
- BIP for OP_CHECKSIGFROMSTACK Brandon Black3 messages
- BIP for OP_INTERNALKEY Brandon Black3 messages
- 23 messages
- 10 messages
- 4 messages
- 5 messages
- CHECKSIGFROMSTACK(VERIFY/ADD) Brandon Black5 messages
- Multi-byte opcodes Weikeng Chen6 messages
- 5 messages
- Trivial QC signatures with clean upgrade path Matt Corallo12 messages
- 18 messages
2025 34 threads
- Update on the Great Consensus Cleanup Revival Antoine Poinsot15 messages
- P2QRH / BIP-360 Update Hunter Beast19 messages
- "Recursive covenant" with CTV and CSFS Anthony Towns20 messages
- ESSPI: ECDSA/Schnorr Signed Program Input for BitVMX Sergio Demian Lerner1 message
- Against Allowing Quantum Recovery of Bitcoin Jameson Lopp43 messages
- Hashed keys are actually fully quantum secure Martin Habovštiak14 messages
- Standard Unstructured Annex Peter Todd7 messages
- 3 messages
- 15 messages
- jpeg resistance of various post-quantum signature schemes Bas Westerbaan5 messages
- 12 messages
- 3 messages
- What's a good stopping point? Making the case for the capabilities enabled by CTV+CSFS Antoine Poinsot14 messages
- 4-leaf Taproot Merkle Tree in Python: testnet implementation + control block analysis aaron.recompile1 message
- 18 messages
- A Post Quantum Migration Proposal Jameson Lopp25 messages
- Human meaningful witness versioning Ethan Heilman9 messages
- 5 messages
- 3 messages
- FROST Signing for Bitcoin: Demo + Taproot Integration Discussion @ Aug 6 Gordian Call Christopher Allen1 message
- 5 messages
- BIP Booby Trapped Wallets - Covenant-Only Taproot Outputs Matias Monteagudo2 messages
- OP_TWEAKADD Jeremy Rubin5 messages
- A Bitcoin Scripting Proposal BIP Quartet Rusty Russell10 messages
- On (in)ability to embed data into Schnorr waxwing/ AdamISZ19 messages
- Limit ScriptPubkey Size >= 520 Bytes Consensus. PortlandHODL46 messages
- Reduced Data Temporary Softfork dathonohm30 messages
- OP_CIV - Post-Quantum Signature Aggregation Tadge Dryja5 messages
- 3 messages
- 17 messages
- 3 messages
- 8 messages
- Hash-Based Signatures for Bitcoin's Post-Quantum Future Mikhail Kudinov17 messages
- Feedback on a simple 2-path vault design (2-of-2 + CLTV recovery) and use of pruned nodes for UTXO retrieval victor perez5 messages
2026 18 threads
- Falcon Post-Quantum Signature Scheme Proposal Giulio Golinelli13 messages
- Algorithm Agility for Bitcoin to maintain security in the face of quantum and classic breaks in the signature algorithms Ethan Heilman45 messages
- Submission of varops budget and tapscript leaf 0xc2 BIPS (aka "Script Restoration") for BIP numbers. Rusty Russell1 message
- Pay to Schnorr Key Hash (P2SKH) sashabeton17 messages
- Post-Quantum BIP-86 Recovery via zk-STARK Proof of BIP-32 Seed Knowledge Olaoluwa Osuntokun18 messages
- In defense of a PQ output type Antoine Poinsot36 messages
- Worst-Case Taproot Witness Weight Estimation Jan Thomasewsky1 message
- Deactivating ECDSA/Schnorr Erik Aronesty10 messages
- PQC - What is our Goal, Even? Matt Corallo22 messages
- A "Quantum-Agile" Bitcoin address proposal Jason Resch5 messages
- PQC: Lattice-based signatures Nikita Karetnikov16 messages
- Aligning privacy incentives in P2MR conduition20 messages
- Giving teeth to expected EC disabling: P2XX(-T)(-ML) Pieter Wuille22 messages
- 5 messages
- 6 messages
- 8 messages
- 7 messages
- Unspendable Internal Keys for Wallet Policies 20999999976900002 messages