View source for Taproot

'''Taproot''' is a consensus-layer upgrade to the Bitcoin protocol that was activated in November 2021 as a [[softfork]] ([[BIP 0340|BIPs 340]], [[BIP 0341|341]], and [[BIP 0342|342]]). Designed to improve [[Bitcoin]]’s [[privacy]], efficiency, and flexibility, Taproot introduces three interconnected innovations: [[Schnorr]] signatures, Merkelized Abstract Syntax Trees (MAST), and Tapscript. Developed over several years by contributors including Pieter Wuille, Gregory Maxwell, and Anthony Towns, Taproot represents one of Bitcoin’s most significant technical advancements since the adoption of Segregated Witness ([[Segregated Witness|SegWit]]) in 2017.

== Technical Overview ==

=== Schnorr Signatures (BIP 340) ===

Taproot replaces Bitcoin’s legacy [[Elliptic Curve Digital Signature Algorithm|ECDSA]] signatures with Schnorr signatures, a cryptographic scheme with two key advantages:
* Linear Property: multiple signatures can be aggregated into a single signature, reducing transaction size (e.g., a 2-of-2 multisig transaction appears identical to a single-sig transaction).
* Enhanced Security: Schnorr signatures are provably secure under standard cryptographic assumptions, unlike ECDSA.

=== Merkelized Abstract Syntax Trees (MAST) ===

MAST (BIP 341) allows users to embed complex spending conditions (e.g., [[Multi-signature|multisig]], timelocks) into a [[Protocol documentation#Merkle_Trees|Merkle tree]]. Only the executed condition is revealed during a transaction, improving privacy by hiding unused scripts.

=== Tapscript (BIP 342) ===

Tapscript introduces a redesigned scripting language optimized for Schnorr signatures and MAST. It simplifies validation logic and enables future upgrades, such as signature batch verification.

== Benefits ==

Improved privacy:
Transactions with complex scripts (e.g., multisig wallets) are indistinguishable from regular transactions, as MAST hides unused branches of the spending logic. Combined with Schnorr, this thwarts blockchain surveillance tools that infer wallet types from transaction patterns.

Reduced transaction fees:
Schnorr’s signature aggregation lowers transaction size by up to 25% for multisig setups, decreasing fees and blockchain bloat.

Flexibility for developers:
Tapscript’s modular design allows developers to implement advanced smart contracts (e.g., Discreet Log Contracts) without compromising privacy or efficiency.

== Activation and adoption ==

Taproot was activated at block height 709,632 on November 14, 2021, following a community-driven Speedy Trial activation mechanism. Adoption has been gradual but steady:
* Wallets: Sparrow Wallet, BlueWallet, and Ledger added Taproot support by 2022.
* Services: Exchanges like Kraken and OKX enable Taproot-native deposits.
* Lightning Network: Taproot’s efficiency benefits are leveraged in Lightning Network channels (e.g., MuSig2 for collaborative channel management).

== Criticisms and limitations ==

While widely praised, Taproot has faced critiques:

* Slow Adoption: many wallets and services still lack full Taproot integration.
* Complexity: developers must learn new standards (e.g., Pay-to-Taproot/P2TR addresses).
* Privacy Caveats: sophisticated chain analysis may still infer Taproot usage through heuristics like coin selection patterns.

== Future implications ==

Taproot lays the groundwork for future upgrades, such as Cross Input Signature Aggregation (CISA), which could further compress transaction sizes. Its privacy enhancements also complement protocols like the Lightning Network and [[CoinSwap]], reinforcing Bitcoin’s fungibility.

== See also ==

* [[Bitcoin Improvement Proposals]]

== External Links ==

* [https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki BIP 340: Schnorr Signatures]
* [https://bitcoincore.org/en/releases/22.0/) Bitcoin Core Taproot Documentation]