diff --git a/bip-0352.mediawiki b/bip-0352.mediawiki index fa9b0d591..8772b027c 100644 --- a/bip-0352.mediawiki +++ b/bip-0352.mediawiki @@ -109,12 +109,12 @@ Bob detects this payment by calculating ''P0 = Bspend + ha For a single silent payment address of the form ''(Bscan, Bspend)'', Bob may wish to differentiate incoming payments. Naively, Bob could publish multiple silent payment addresses, but this would require him to scan for each one, which becomes prohibitively expensive. Instead, Bob can label his spend public key ''Bspend'' with an integer ''m'' in the following way: * Let ''Bm = Bspend + m·G'' -* Publish ''(Bscan, B0)'', ''(Bscan, B1) …'' +* Publish ''(Bscan, B0)'', ''(Bscan, B1)'' etc. Alice performs the tweak as before using one of the published ''(Bscan, Bm)'' pairs. Bob detects the labeled payment in the following manner: * Let ''P0 = Bspend + hash(outpoints_hash·bscan·A || 0)·G'' -* Subtract ''P0'' from each of the transaction outputs and check if the remainder matches any of the labels (''1·G, 2·G ..'') that the wallet has previously used +* Subtract ''P0'' from each of the transaction outputs and check if the remainder matches any of the labels (''1·G'', 2·G'' etc.) that the wallet has previously used It is important to note that an outside observer can easily deduce that each published ''(Bscan, Bm)'' pair is owned by the same entity as each published address will have ''Bscan'' in common. As such, labels are not meant as a way for Bob to manage separate identities, but rather a way for Bob to determine the source of an incoming payment.