How does $K + t\cdot G = (k+t)\cdot G$ let a watch-only server hand out fresh addresses without ever touching a private key?
Loading…
The tweak identity and the watch-only asymmetry it buys