Avatar
David Pinkerton
909e3fdc259a211ead564dc589e34a81aef214665d5e6889ef8bb6d473f2b10a

Example: Ensuring Secure Cosigning

πŸ” Imagine you have a wallet descriptor listing this cosigner's xpub:

xpub6EDJac9G93fFKuJsXRfBwJ45APnGTg4VwqEHmaLTrfXy18QzMSRiRVxcTdKhhpKNPPdo6Ct3j9xte8ciuLYxHYdLvixXqpHpDg8x5JfNn4k

πŸ—³οΈ You ask your cosigner to sign a message, "Forever, Laura.", using a key derived from their corresponding xprv with the path /0.

πŸ” You calculate the public key: 039a23c735abd0610aaf89fe356a860b65545c571bdaece7a82260e5f207a77185.

πŸ’° And from this, you obtain the Bitcoin address: 1LrH1NQb5HeXffFtpuXNkHZavyXjt57VFX.

πŸ›‘οΈ Your cosigner's wallet software (Sparrow, Nunchuk, Coldcard, SeedSigner, or others) derives the private key using the full path, e.g., m/48'/0'/0'/2'/0, and uses the resulting private key to return this signature:

IM9MYx4E94xyXFTDRPf5W4+RdOpw11b28jCq1yq4ctcoVXpGexSfrlC0KqYjay7erZ4PjX1mlFKpINzk2YqPGVU=

πŸ” You verify this signature and gain reassurance that your cosigner is ready to stand by you.

πŸ”— Try it out and easily verify a signature at https://checkmsg.org/

Here's how I would like to confirm that my cosigners are competent.

Step 1: Prepare a Unique Message

πŸ“ Prepare a unique and freshly generated message that you will provide to your cosigner.

Step 2: Specify Derivation Path

πŸ”‘ Define the derivation path for your cosigner.

Step 3: Request Cosigner's Cryptographic Signature

πŸ”’ Share the message, the derivation path and the participating xpub with your cosigner and request a cryptographic signature from them.

Step 4: Cosigner's Action

πŸ–‹οΈ Your cosigner signs the message you provide, using a key derived from the xprv partner to their xpub.

Step 5: Calculate Public Key

πŸ” Calculate the public key by applying the specified derivation path to their xpub.

Step 6: Verify Signature

πŸ›‘οΈ Verify the signature's validity using the derived public key.

Step 7: Establish Trust

🀝 If the signature is valid, you can trust that your cosigner maintains control of their key.

What is your preferred way of checking that a cosigner can still sign a multi-sig transaction with you?

What will Bullrich/Schiaretti/Bregman voters do when Milei and Massa go head-to-head next month?

Thanks. Gambling is high time preference but I couldn't resist punting on the referendum. I enjoyed sharing it with a few woke lefties for a laugh. They were sad and insulted! One dope suggested that I bet on yes because I could win more. Lnmarkets is a bit like Betfair, I think.

Taking what I won from betting on the voice referendum and using it to back Milei in this weekend's election.

A bitcoin pamphlet to help newbies with the first wallet. This is based on the design by Anita Posch but adapted for the new Phoenix wallet.

https://suds4sats.com/phoenix%20guide.pdf

Can you join us at the Brisbane Bitcoin Meetups on the first Thursday of every month?

Thanks for the support, blokes! I'll definitely bring some to the meetup. ☺️

Brewed in tribute to Javier Milei and in anticipation of his victory in the impending Argentinean presidential election.

I tried refreshing and now it says that there's nothing to see.