21 BTC

Taproot

Updated Reviewed articleRandom article
In plain words

Taproot is a 2021 upgrade that added Schnorr signatures and a way to hide unused spending conditions. Complex wallets, such as multisig, can look like ordinary single-key payments.

Three parts

  • BIP 340: Schnorr signatures. Smaller than ECDSA signatures and linear, so several keys can be combined into one (for example with MuSig2).
  • BIP 341: Taproot outputs. A coin is locked to one key that may also commit to a tree of alternative scripts; only the branch actually used is revealed.
  • BIP 342: Tapscript, the script rules for those branches.

Taproot addresses use bech32m (BIP 350) and start with bc1p.

Activation and side effects

Miners signalled through the “Speedy Trial” mechanism, lock-in came in June 2021, and Taproot activated at block 709,632 on 14 November 2021. It was the first consensus upgrade since SegWit.

Taproot also made it cheaper to put arbitrary data in the witness, which Ordinals inscriptions used from 2023 on. That is one root of the Knots vs Core relay-policy argument.

From the Bitcoin Museum

Taproot activates (block 709,632) (14 Nov 2021): The Taproot soft fork activates, adding Schnorr signatures and more private, efficient scripts.

Taproot in the museum Taproot Assets stablecoins

See also

References

  1. BIP 340 (github.com/bitcoin/bips) github.com
  2. BIP 341 (github.com/bitcoin/bips) github.com
  3. BIP 342 (github.com/bitcoin/bips) github.com
  4. BIP 350 (github.com/bitcoin/bips) github.com
  5. Block 709,632 on mempool.space mempool.space