Skip to content

Commit 7ae9e02

Browse files
author
Robert Spigler
authored
Minor edits, + backwards compatibility
1 parent ccc8af4 commit 7ae9e02

File tree

1 file changed

+9
-7
lines changed

1 file changed

+9
-7
lines changed

Modern Hierarchy for Deterministic Multisignature Wallets.mediawiki

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -50,9 +50,7 @@ m / purpose' / coin_type' / account' / script_type' / change / address_index
5050

5151
Rather than following in BIP 44/49/84's path and having a separate BIP per script after P2SH (BIP45), vendors decided to insert <code>script_type'</code> into the derivation path (where P2SH-P2WSH=1, P2WSH=2, Future_Script=3, etc). As described previously, this is unnecessary, as the descriptor sets the script. While it attempts to reduce maintainence work by getting rid of new BIPs-per-script, it still requires maintaining an updated, redundant, <code>script_type</code> list.
5252

53-
The structure proposed later in this paper solves these issues and is quite comprehensive. It allows for the handling of multiple accounts, external and internal chains per account, and millions of addresses per chain, in a multi-party, multisignature, hierarchical deterministic wallet regardless of the script type <ref>'''Why propose this structure only for multisignature wallets?''' Currently, single-sig wallets are able to restore funds using just the master private key data (in the format of BIP39 usually). Even if the user doesn't recall the derivation used, the wallet implementation can iterate through common schemes (BIP44/49/84). With this proposed hierarchy, the user would either have to now backup additional data (the descriptor), or the wallet would have to attempt all script types for every account level when restoring. Because of this, even though the descriptor language handles the signature type just like it does the script type, it is best to restrict this script-agnostic hierarchy to multisignature wallets only. Co-signers in multisignature wallets need to backup all other cosigner public keys anyway in order to restore, so the descriptor provides this information with the benefit of key origin information and error detection.</ref>.
54-
55-
Any script that is supported by descriptors (and the specific wallet implementation) is compatible with this BIP.
53+
The structure proposed later in this paper solves these issues and is quite comprehensive. It allows for the handling of multiple accounts, external and internal chains per account, and millions of addresses per chain, in a multi-party, multisignature, hierarchical deterministic wallet regardless of the script type <ref>'''Why propose this structure only for multisignature wallets?''' Currently, single-sig wallets are able to restore funds using just the master private key data (in the format of BIP39 usually). Even if the user doesn't recall the derivation used, the wallet implementation can iterate through common schemes (BIP44/49/84). With this proposed hierarchy, the user would either have to now backup additional data (the descriptor), or the wallet would have to attempt all script types for every account level when restoring. Because of this, even though the descriptor language handles the signature type just like it does the script type, it is best to restrict this script-agnostic hierarchy to multisignature wallets only.</ref>.
5654

5755
This paper was inspired from BIP44.
5856

@@ -128,7 +126,7 @@ The multisig descriptors or descriptor template that is generated from the cosig
128126

129127
For example:
130128

131-
The following descriptor template and derivation path:
129+
The following descriptor template and derivation path restrictions:
132130

133131
<code>wsh(sortedmulti(2,[xfpForA/XY'/0'/0']XpubA/**,[xfpForB/XY'/0'/0']XpubB/**))</code>
134132

@@ -142,13 +140,17 @@ Expands to the two concrete descriptors:
142140

143141
To discover addresses, import both the receiving and change descriptors; respect the gap limit described below.
144142

145-
Note: This therefore necessitates that multisig wallets backup their private key information and their descriptor, in order to properly restore at a later time. This shouldn't be a user burden, since (to much user surprise), all cosigner public keys need to be supplied in addition to <code>M</code> seeds in any <code>M</code> of <code>N</code> multisig restore operation. The descriptor provides this information in a standardized format, with key origin information and error detection.
146-
147143
===Address Gap Limit===
148144

149145
Address gap limit is currently set to 20. If the software hits 20 unused addresses in a row, it expects there are no used addresses beyond this point and stops searching the address chain.
150146

151-
Wallet software should warn when the user is trying to exceed the gap limit on an external chain by generating a new address.
147+
Wallet software should warn when the user is trying to exceed the gap limit on an external descriptor by generating multiple unused addresses.
148+
149+
==Backwards Compatibility==
150+
151+
Any script that is supported by descriptors (and the specific wallet implementation) is compatible with this BIP.
152+
153+
As wallets complying with this BIP are descriptor wallets, this therefore necessitates that the cosigners backup their private key information and the descriptor, in order to properly restore at a later time. This shouldn't be a user burden, since (to much user surprise), all cosigner public keys need to be supplied in addition to <code>M</code> seeds in any <code>M</code> of <code>N</code> multisig restore operation. The descriptor provides this information in a standardized format, with key origin information and error detection.
152154

153155
==Rationale==
154156

0 commit comments

Comments
 (0)