@@ -46,53 +46,53 @@ The new per-input types are defined as follows:
4646| rowspan="2"|MuSig2 Participant Public Keys
4747| rowspan="2"|<tt>PSBT_IN_MUSIG2_PARTICIPANT_PUBKEYS = 0x1a </tt>
4848| <tt><33 byte plain aggregate pubkey> </tt>
49- | <tt><33 byte compressed pubkey>* </tt>
49+ | <tt><33 byte plain participant pubkey>* </tt>
5050| rowspan="2"|
5151| rowspan="2"|
5252| rowspan="2"| 0, 2
5353|-
54- | The MuSig2 aggregate plain public key<ref >'''Why the plain aggregate public key instead of x-only?'''
54+ | The MuSig2 plain aggregate public key<ref >'''Why the plain aggregate public key instead of x-only?'''
5555BIP 32 requires public keys to include their evenness byte. Aggregate public keys are expected to be
5656derived from, following [[bip-0328.mediawiki |BIP 328 ]], and therefore will
5757need to include the evenness. Furthermore, PSBT_IN_TAP_BIP32_DERIVATION fields include fingerprints
58- to identify master keys, and these fingerprints require full compressed public keys. By including
58+ to identify master keys, and these fingerprints require full plain public keys. By including
5959the aggregate key as a full public key, signers that are unaware of the MuSig2 outside of the PSBT
6060will still be able to identify which keys are derived from the aggregate key by computing and then
6161comparing the fingerprints. This is necessary for the signer to apply the correct tweaks to their
6262partial signature.</ref > from the <tt>KeyAgg </tt> algorithm. This key may or may not appear
6363(as x-only) in the Taproot output key, the internal key, or in a script. It may instead be a parent public
6464key from which the Taproot output key, internal key, or keys in a script were derived.
65- | A list of the compressed public keys of the participants in the MuSig2 aggregate key in the order
65+ | A list of the plain public keys of the participants in the MuSig2 aggregate key in the order
6666required for aggregation. If sorting was done, then the keys must be in the sorted order.
6767|-
6868| rowspan="2"|MuSig2 Public Nonce
6969| rowspan="2"|<tt>PSBT_IN_MUSIG2_PUB_NONCE = 0x1b </tt>
70- | <tt><33 byte compressed pubkey> <33 byte plain pubkey> <32 byte hash or omitted> </tt>
70+ | <tt><33 byte plain participant pubkey> <33 byte plain aggregate pubkey> <32 byte hash or omitted> </tt>
7171| <tt><66 byte public nonce> </tt>
7272| rowspan="2"|
7373| rowspan="2"|
7474| rowspan="2"| 0, 2
7575|-
76- | The compressed public key of the participant providing this nonce, followed by the plain public
76+ | The plain public key of the participant providing this nonce, followed by the plain aggregate public
7777key the participant is providing the nonce for, followed by the BIP 341 tapleaf hash of
7878the Taproot leaf script that will be signed. If the aggregate key is the Taproot internal key or the
79- Taproot output key, then the tapleaf hash must be omitted. The plain public key must be
79+ Taproot output key, then the tapleaf hash must be omitted. The plain participant public key must be
8080the Taproot output key or found in a script. It is not the internal key nor the aggregate public key that
8181it was derived from, if it was derived from an aggregate key.
8282| The public nonce produced by the <tt>NonceGen </tt> algorithm.
8383|-
8484| rowspan="2"|MuSig2 Participant Partial Signature
8585| rowspan="2"|<tt>PSBT_IN_MUSIG2_PARTIAL_SIG = 0x1c </tt>
86- | <tt><33 byte compressed pubkey> <33 byte plain pubkey> <32 byte hash or omitted> </tt>
86+ | <tt><33 byte plain participant pubkey> <33 byte plain aggregate pubkey> <32 byte hash or omitted> </tt>
8787| <tt><32 byte partial signature> </tt>
8888| rowspan="2"|
8989| rowspan="2"|
9090| rowspan="2"| 0, 2
9191|-
92- | The compressed public key of the participant providing this partial signature, followed by the
92+ | The plain public key of the participant providing this partial signature, followed by the
9393plain public key the participant is providing the signature for, followed by the BIP 341 tapleaf hash
9494of the Taproot leaf script that will be signed. If the aggregate key is the Taproot internal key or
95- the Taproot output key, then the tapleaf hash must be omitted. Note that the plain public key must be
95+ the Taproot output key, then the tapleaf hash must be omitted. Note that the plain participant public key must be
9696the Taproot output key or found in a script. It is not the internal key nor the aggregate public key that
9797it was derived from, if it was derived from an aggregate key.
9898| The partial signature produced by the <tt>Sign </tt> algorithm.
@@ -111,16 +111,16 @@ The new per-output types are defined as follows:
111111|-
112112| rowspan="2"|MuSig2 Participant Public Keys
113113| rowspan="2"|<tt>PSBT_OUT_MUSIG2_PARTICIPANT_PUBKEYS = 0x08 </tt>
114- | <tt><33 byte compressed pubkey> </tt>
115- | <tt><33 byte compressed pubkey>* </tt>
114+ | <tt><33 byte plain aggregate pubkey> </tt>
115+ | <tt><33 byte plain participant pubkey>* </tt>
116116| rowspan="2"|
117117| rowspan="2"|
118118| rowspan="2"|0, 2
119119|-
120- | The MuSig2 aggregate plain public key from the <tt>KeyAgg </tt> algorithm. This key may or may not
120+ | The MuSig2 plain aggregate public key from the <tt>KeyAgg </tt> algorithm. This key may or may not
121121appear (as x-only) in the Taproot output key, the internal key, or in a script. It may instead be a parent
122122public key from which the Taproot output key, internal key, or keys in a script were derived.
123- | A list of the compressed public keys of the participants in the MuSig2 aggregate key in the order
123+ | A list of the plain public keys of the participants in the MuSig2 aggregate key in the order
124124required for aggregation. If sorting was done, then the keys must be in the sorted order.
125125|}
126126
0 commit comments