Bitcoin Forum
May 09, 2024, 06:43:51 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: How much information is shared with a multisig transaction/address?  (Read 957 times)
Automatic (OP)
Full Member
***
Offline Offline

Activity: 238
Merit: 105


View Profile
March 18, 2014, 01:16:18 PM
 #1

For both a transaction entering, and, leaving a multisig address, along with the address itself, what information do people who are **NOT** part of the address themselves see (I.E. Someone random on the network, such as a miner, or simply a full-node)?

Do they know the public key/hashed public key (I.E. address) of the participating clients?
Do they know how many clients there are (N in M-of-N)?
Do they know how many clients are needed to sign a key (M in M-of-N)?

And, another question:-
If I know two pub keys (I.E. pubA & pubB), can I determine if an address/transaction on the network includes those two pub keys in a 2-of-3? And how resource wasteful would that be (Checking to see if an address/transaction included my two pub keys)? So, imagine I was part of a service, I gave them my two pubkeys, and, they randomly generated their pubkey (from one of their private keys), then send $amount BTC to the address they generated without telling me the third key, would I be able to determine what address they sent to and be able to cash out my money? Or am I clueless without that third key (And thus even though I should be able to cash out the money (Due to me owning enough privatekeys), I can't because I don't know the TXID)?

Sorry, slightly confused about multisig.

Note:- Please give each answer a three-part answer, for both:-
1. Address on its own (I.E. address that has never had a transaction in/out)
2. Address with a singular TXIN
3. Address with a singular TXIN and singular TXOUT

EDIT:- Also, small little question at the end, is there anything random about a multisig address generation? I.E. if I had the three pubkeys and ran createmultisig ten times, would I always get the same address, assuming I used the same pubkeys & M-of-N?

Please ask for a signed message from my on-site Bitcoin address (Check my profile) before doing any offsite trades with me.
1715280231
Hero Member
*
Offline Offline

Posts: 1715280231

View Profile Personal Message (Offline)

Ignore
1715280231
Reply with quote  #2

1715280231
Report to moderator
1715280231
Hero Member
*
Offline Offline

Posts: 1715280231

View Profile Personal Message (Offline)

Ignore
1715280231
Reply with quote  #2

1715280231
Report to moderator
1715280231
Hero Member
*
Offline Offline

Posts: 1715280231

View Profile Personal Message (Offline)

Ignore
1715280231
Reply with quote  #2

1715280231
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715280231
Hero Member
*
Offline Offline

Posts: 1715280231

View Profile Personal Message (Offline)

Ignore
1715280231
Reply with quote  #2

1715280231
Report to moderator
1715280231
Hero Member
*
Offline Offline

Posts: 1715280231

View Profile Personal Message (Offline)

Ignore
1715280231
Reply with quote  #2

1715280231
Report to moderator
1715280231
Hero Member
*
Offline Offline

Posts: 1715280231

View Profile Personal Message (Offline)

Ignore
1715280231
Reply with quote  #2

1715280231
Report to moderator
piotr_n
Legendary
*
Offline Offline

Activity: 2053
Merit: 1354


aka tonikt


View Profile WWW
March 18, 2014, 03:25:17 PM
 #2

Quote
what information do people who are **NOT** part of the address themselves see

As long as you don't spend anything from a certain multisig address, everything stays secret from the third parties.

As soon as you have spent anything from such an address, everybody gets to know:
1) How many signatures were needed (N) for how many keys (M)
2) Each of the M public keys

Check out gocoin - my original project of full bitcoin node & cold wallet written in Go.
PGP fingerprint: AB9E A551 E262 A87A 13BB  9059 1BE7 B545 CDF3 FD0E
jl2012
Legendary
*
Offline Offline

Activity: 1792
Merit: 1097


View Profile
March 18, 2014, 03:34:08 PM
 #3

For both a transaction entering, and, leaving a multisig address, along with the address itself, what information do people who are **NOT** part of the address themselves see (I.E. Someone random on the network, such as a miner, or simply a full-node)?

Do they know the public key/hashed public key (I.E. address) of the participating clients?
Do they know how many clients there are (N in M-of-N)?
Do they know how many clients are needed to sign a key (M in M-of-N)?

And, another question:-
If I know two pub keys (I.E. pubA & pubB), can I determine if an address/transaction on the network includes those two pub keys in a 2-of-3? And how resource wasteful would that be (Checking to see if an address/transaction included my two pub keys)? So, imagine I was part of a service, I gave them my two pubkeys, and, they randomly generated their pubkey (from one of their private keys), then send $amount BTC to the address they generated without telling me the third key, would I be able to determine what address they sent to and be able to cash out my money? Or am I clueless without that third key (And thus even though I should be able to cash out the money (Due to me owning enough privatekeys), I can't because I don't know the TXID)?

Sorry, slightly confused about multisig.

Note:- Please give each answer a three-part answer, for both:-
1. Address on its own (I.E. address that has never had a transaction in/out)
2. Address with a singular TXIN
3. Address with a singular TXIN and singular TXOUT

EDIT:- Also, small little question at the end, is there anything random about a multisig address generation? I.E. if I had the three pubkeys and ran createmultisig ten times, would I always get the same address, assuming I used the same pubkeys & M-of-N?

There are 2 types of multisig: "traditional" one, with all public keys shown in the scriptPubKey; and P2SH

With the traditional one, all public keys, and the redemption rules, are known to everyone at any time

With P2SH, only the payee would know the public keys and the redemption rules, until it is spent

Donation address: 374iXxS4BuqFHsEwwxUuH3nvJ69Y7Hqur3 (Bitcoin ONLY)
LRDGENPLYrcTRssGoZrsCT1hngaH3BVkM4 (LTC)
PGP: D3CC 1772 8600 5BB8 FF67 3294 C524 2A1A B393 6517
Cryddit
Legendary
*
Offline Offline

Activity: 924
Merit: 1129


View Profile
March 19, 2014, 02:35:12 AM
 #4

Once an output is spent, then everybody on the network knows whatever they need to know to verify that it was correctly spent. 

ie. public keys, number of actual signers, number of potential signers, etc -- all of that stuff.

Up until the output is spent, P2SH keeps all that stuff private (because they're looking at the script hash, not the script).  But in order to spend it somebody has to produce the script, and everybody has to be able to see it to verify that it matches the hash.  And then they have to do whatever the script says, and everybody has to be able to prove that they did it.

Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!