Hierarchical Multisignature | Bitcointalksearch.org

TierNolan

legendary

Activity: 1232

Merit: 1094

Quote from: buddhamangler on July 06, 2015, 10:17:24 PM

Does bitcoin have this? Obviously the math would differ in bitcoin possibly, i'm speaking only in the functionality. I would think this would be a good addition to multisignature...the idea of one key having more 'importance/relevance' than another with differing numbers of keys required based on their 'level'.

There isn't a single opcode to do it.

If you wanted one master key and 2 of 3 of the other keys, you could use the following scriptPubKey

Code:

OP_CHECKSIGVERIFY OP_2

OP_3 OP_CHECK OP_CHECKMULTISIG

To spend it, you use the following scriptSig

Code:

OP_0

The OP_CHECKSIGVERIFY checks the master sig and then the OP_CHECKMULTISIG checks the 2 out of 3 for the sub-signatures.

You can use OP_IF / OP_ELSE to have multiple options.

Code:

OP_IF OP_CHECKSIG OP_ELSE OP_2

OP_2 OP_CHECKMULTISIG OP_ENDIF

This means either you sign using the private key associated with pub-keyA or you can sign with the private key associated with (2 of 2) pub-keyB1 and pub-keyB2.

virtualx

hero member

Activity: 672

Merit: 508

LOTEO

Quote from: buddhamangler on July 06, 2015, 10:17:24 PM

Does bitcoin have this?

A list of new bitcoin features are here: https://en.bitcoin.it/wiki/Bitcoin_Improvement_Proposals
There is a shared key system known as multisignature, but I am not aware of a master keys / subkeys system in the bitcoin system.
How would this benefit over multisignature?

buddhamangler

member

Activity: 74

Merit: 10

Does bitcoin have this? Obviously the math would differ in bitcoin possibly, i'm speaking only in the functionality. I would think this would be a good addition to multisignature...the idea of one key having more 'importance/relevance' than another with differing numbers of keys required based on their 'level'.

Maybe you have a situation such as two master keys, and 5 subkeys. Where both master keys must sign, or one master key and 3 subkeys, or all 5 subkeys..etc etc. The permutations are enormous obviously.

From http://passguardian.com/

Within http://passguardian.com/assets/1979_HowToShareASecret_Shamir.pdf

(4) By using tuples of polynomial values as Di pieces, we
can get a hierarchical scheme in which the number of
pieces needed to determine D depends on their importance.
For example, if we give the company's
president three values of q(x), each vice-president
two values of q(x), and each executive one value of
q(x), then a (3, n) threshold scheme enables checks to
be signed either by any three executives, or by any
two executives one of whom is a vice-president, or by
the president alone.

Topic: Hierarchical Multisignature (Read 723 times)