Full analysis selected. Choose Quick brief to read the key points first.
WFN QUICK BRIEF · UNDER 1 MIN
The short version
MODE 2 OF 2
What the primary record establishes
BIP 340 encodes a secp256k1 Schnorr public key using only its X coordinate. Of the candidate points with that X coordinate, it uses the one with an even Y coordinate. Bitcoin BIP 340 ↗
What the distinction changes
A conventional compressed secp256k1 key contains 33 bytes, with a prefix that distinguishes Y parity. BIP 340 uses a different convention. Conversion needs to follow that convention, especially when the surrounding protocol imposes its own key preparation.
What to check before drawing a conclusion
The BIP defines a 64-byte signature verified against a key and message. A Taproot spend also has rules for constructing that message. Use the official positive and negative vectors for the cryptographic library and a separate transaction-level test for the wallet.
Quick Brief is a reading aid. The full article and source trail stay on this page.
WFN STORY COMPASS
Choose your reading angle
Switch between the reported record, market context and open questions. Status labels distinguish claims from findings.
All context layers are visible. Choose a lens to jump to that part of the story.
Original WFN vector illustrationWFN · 6 November 2026
Editorial noteSource-based explanation with original WFN analysis. Historical records retain their dates; numerical examples are illustrative. The original vector illustration is conceptual and is not documentary evidence.
The linked source supports the documented record; WFN interpretation and illustrative examples are separate.
01 · VERIFIED RECORD
What the primary record establishes
BIP 340 encodes a secp256k1 Schnorr public key using only its X coordinate. Of the candidate points with that X coordinate, it uses the one with an even Y coordinate. Bitcoin BIP 340 ↗
02 · WFN EDITORIAL ANALYSIS
What the distinction changes
A conventional compressed secp256k1 key contains 33 bytes, with a prefix that distinguishes Y parity. BIP 340 uses a different convention. Conversion needs to follow that convention, especially when the surrounding protocol imposes its own key preparation.
03 · REVIEW POINTS
What to check before drawing a conclusion
The BIP defines a 64-byte signature verified against a key and message. A Taproot spend also has rules for constructing that message. Use the official positive and negative vectors for the cryptographic library and a separate transaction-level test for the wallet.
