privacy with improved efficiency compared to not being private at all.
sufficient to authorize a transaction-- we can do even better.
required to destroy the ability to use alternatives by changing keys.
assumption the only case that is ever needed.
128 bit ECC). This is higher overhead than taproot.
it's probably a pretty good idea to make it a PoK.
sign each of the the surrogates. Participants save these signatures.
avoids the rathole that earlier delegation discussions have suffered.
transaction), at the cost of storing the signed delegation?
before, this is the inverse).
after the first 100 require z, etc).
conditional on another delegate being signed, e.g. a bilateral agreement.
invalid before, this is the inverse).
Tagging this thread with "nExpiryTime". Search archives for more.
I don't think that binding grafts to a particular transaction requires this aggregation.
It seems to me that you could just sign H(txid, script) rather than H(script).
I'm not aware of whether this would break aggregation.
work if the graft isn't created after the fact.