Here and there in various forum's boards one may come across posts relevant to Sileint Payments - technique which allow anyone to send BTC to user's unique static address, while each payment arrives at unique one-time address . Notably such techinique doesn't require direct preliminary communication between sender and receiver
as it was required by PayNyms, for example as both parties independently derive the same one-time addresse using Elliptic Curve Diffie-Hellman algorithm.
The aim of this post is to ennumarate the full stack of silent payments as it stands today.
1)
BIP352, the core protocol (ECDH, addresses, scanning, etc..) Authors: Josiah Baker, Ruben Somsen, Sebastian Falbesoner. BIP's status: version: 1.1.1, last commits: May 31, 2026
Some major points BIP352 specifies:
- The ECDH-based key derivation for sender and receiver
- The sp1… address encoding
- The input eligibility rule)
- The input_hash computation to prevent certain attacks
- The scanning algorithm a receiver must run
- Test vectors for implementation verification
2)
BIP374, Discrete Log Equality Proofs (DLEQ). Authors: Andrew Toth, Ruben Somsen, Sebastian Falbesoner, BIP's status: Draft, last commits: Apr 28, 2026
Some major points BIP352 specifies:- Standard 64-byte zero-knowledge proof format proving that the same discrete logarithm relationship holds across two different elliptic curve bases, without revealing the private key
- Tagged hashing scheme for the proof challenge to prevent cross-protocol reuse
- GenerateProof algorithms
- Test vectors for both proof generation and verification
3)
BIP375, sending Silent Payments with PSBTs, Authors: Andrew Toth, Ruben Somsen, Sebastian Falbesoner, BIP's status: Draft, last commits: Apr 28, 2026
Some major points BIP375 specifies: - New PSBT output field PSBT_OUT_SP_V0_INFO carrying the recipient's scan and spend public keys before the output script is known
- New global fields PSBT_GLOBAL_SP_ECDH_SHARE and PSBT_GLOBAL_SP_DLEQ for a single signer contributing one aggregate ECDH share with a BIP374 proof
- New per-input fields PSBT_IN_SP_ECDH_SHARE and PSBT_IN_SP_DLEQ for the multi-signer case where each signer contributes a per-input share independently
- Role definitions: how Constructors, Updaters, Signers, and Extractors each interact with these field
- Defines ow the final PSBT_OUT_SCRIPT is computed from the collected ECDH shares once all signers have contributed]
- Modification of PSBT_OUT_SCRIPT to be optional in silent-payment-capable PSBTs
4)
BIP376 , spending Silent Payment Outputs with PSBTs. Authors: nymius (BDK contributor, pseudonymous), BIP's status: Draft, last commits: Apr 11, 2026
Some major points BIP376 specifies:- New PSBTv2 per-input fields carrying the tweak data needed to reconstruct the private key for a received silent payment output
- Establishes how a signer uses the stored tweak to derive the correct signing key without re-scanning the blockchain
5)
BIP392, Silent Payment Output Script Descriptors. Authors:Craig Raw , BIP's status: Draft, last commits: Mar 5, 2026
Some major points BIP392 specifies: - New sp(spscan_key, spspend_key) descriptor expressions for silent payment wallets
- Optional wallet birthday argument to bound how far back a rescan needs to go
- Optional labels argument specifying which label integers the wallet should scan for
As one may see, most of the Silent Payments stack is still in draft state. Probably due to this, wallets are not in a hurry to implement it. Sparrow is ahead of the curve, probably because it is descriptors-based wallet and its developer is author of the relevant part of the Silent Payments stack (BIP392).
P.S. This topic is too vast, so any help to refine it would be greatly appreciated.
References:
1)
https://github.com/bitcoin/bips/blob/master/bip-0352.mediawiki2)
https://bips.xyz/3523)
https://github.com/bitcoin/bips/blob/master/bip-0374.mediawiki4)
https://bips.xyz/3745)
https://github.com/bitcoin/bips/blob/master/bip-0375.mediawiki6)
https://bips.xyz/3757)
https://github.com/bitcoin/bips/blob/master/bip-0376.mediawiki8.)
https://bips.xyz/3769)
https://github.com/bitcoin/bips/blob/master/bip-0392.mediawiki10)
https://bips.xyz/39211)
https://bennet.org/learn/silent-payments-bitcoin-privacy/12)
https://bitcoinindex.net/blog/bip392-silent-payment-descriptors-finalized-for-wallet-integ/13)
https://blog.bitbox.swiss/en/understanding-silent-payments-part-one/14)
https://blog.bitbox.swiss/en/understanding-silent-payments-part-two/