Subject: Re: [Bitcoin-development] New standard transaction types: time to schedule a blockchain split?

From: Gregory Maxwell <[email-masked]>
Date: Wed, 24 Aug 2011 16:29:06 -0400

On Wed, Aug 24, 2011 at 3:05 PM, Christian Decker
<[email-masked]> wrote:
> we could add an rsa-like scheme which allows m-out-of-n signatures. It works
> by distributing shares of the key which are points on a curve having the
> actual key as 0-value. It does not require special length for the key so if
> ecdsa allows something similar there need not be anything changed.

This works fine for ECC.  But it requires that the composite key
signer has simultaneous access to all the key-parts, so it doesn't
solve the "my PC has malware" problem.