Oddbean new post about | logout
▲ ▼
laanwj | 2 months ago (raw) | root | parent | reply | flag +1 
 that's a fascinating construction ! to be honest i can't immediately say how fool-proof it is, but it won't make things less secure than when the generating party sees the full private key
▲ ▼
aj | 2 months ago (raw) | root | parent | reply | flag +2 
 It's equivalent to grinding through unhardened paths in an HD wallet whose xpub you know, then telling the wallet owner "wpkh(xpubBLAH/3568/4528/6426) has a nifty pubkey"