0
I'm particularly interested in this for large n multi-sig wallets. For example, if m-of-n is 4-of-6, and 6 different people (e.g. 6 non-profit co-directors) hold each of the n keys. If one day all of the wallet is emptied just using 4 (m) keys, will the 2 (n-m) people be able to determine which were the 4 keys and thereby the 4 co-directors that emptied the wallet?
So then I would need to know which individuals hold which public keys from the beginning, when the wallet is created? – Aaron Perlmutter – 2018-04-08T14:13:54.767
Yes, that's correct – Raghav Sood – 2018-04-08T14:19:05.587
1This mechanism is also only generally available to the participants in the multisig construction, if the common advice of no key reuse is followed. – Pieter Wuille – 2018-04-08T16:20:52.927