Oddbean new post about | logout
 BASIC SCHEME


The recipient publishes their silent payment address, a single 32 byte public key:
X = x*G

The sender picks an input containing a public key:
I = i*G

The sender tweaks the silent payment address with the public key of their input:
X' = hash(i*X)*G + X

Since i*X == x*I (Diffie-Hellman Key Exchange), the recipient can detect the payment by calculating hash(x*I)*G + X for each input key I in the blockchain and seeing if it matches an output in the corresponding transaction.

via https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2022-March/020180.html 
 Thanks for that explanation 👍