{"type":"rich","version":"1.0","author_name":"npub1mxz2kkpp4z07x65rxwr6gsksd9cnwn0q22lx874t63dh6uulsy7qxnqexn","author_url":"https://nostr.ae/npub1mxz2kkpp4z07x65rxwr6gsksd9cnwn0q22lx874t63dh6uulsy7qxnqexn","provider_name":"njump","provider_url":"https://nostr.ae","html":"📅 Original date posted:2021-03-19\n📝 Original message:I recently found some interesting and simple HD wallet design here: https://bitcointalk.org/index.php?topic=5321992.0\nCould anyone see any flaws in such design or is it safe enough to implement it and use in practice?\nIf I understand it correctly, it is just pure ECDSA and SHA-256, nothing else:\nmasterPublicKey = masterPrivateKey * G\nmasterChildPublicKey = masterPublicKey + ( SHA-256( masterPublicKey || nonce ) mod n ) * G\nmasterChildPrivateKey = masterPrivateKey + ( SHA-256( masterPublicKey || nonce ) mod n )\nAlso, it has some nice properties, like all keys starting with 02 prefix and allows potentially unlimited custom derivation path by using 256-bit nonce.\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20210319/84226cbf/attachment.html\u003e"}