<p>Public keys are not hashed in Taproot (SegWit v1). The Taproot (Merkle) tree in the script path uses hashes but the Merkle root of this tree tweaks the unhashed public key (internal key) and the resulting tweaked public key is not hashed either. For more details on why see the <a href="https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki#cite_ref-2-0" rel="noreferrer">reference 2</a> in BIP 341.</p>

CC BY-SA 4.0
2022-12-10T19:37:34.950Z
Does that mean that there are roughly 2^256 possible Taproot addresses (eg pubkeys)?
Jonathan Cross
CC BY-SA 4.0
2022-12-11T07:44:29.583Z
Right, not quite 2^256 possible points on secp256k1 curve but pretty close https://bitcoin.stackexchange.com/questions/114135/how-does-ecdsa-work-when-generating-the-public-key/
Michael Folkson
CC BY-SA 4.0
2021-06-11T11:05:49.987Z
2021-06-11T12:08:36.367Z
2021-06-11T12:08:36.367Z
Michael Folkson
<p>Are the new Taproot addresses (SegWit v1) also a hash of the (potentially tweaked) public key, or is the public key directly encoded into the address, without hashing it?</p>

<hash><public-key><taproot><p2tr>
P2TR: Is pub key hashed in address?
Dalit Sairio
# P2TR: Is pub key hashed in address?

(Asked by: username_0 on 2021-06-11)

Are the new Taproot addresses (SegWit v1) also a hash of the (potentially tweaked) public key, or is the public key directly encoded into the address, without hashing it?

**Tags:** hash, public-key, taproot, p2tr


---

## 1 answers

### Answer by username_1 on 2021-06-11. Score: 5 | Accepted answer

Public keys are not hashed in Taproot (SegWit v1). The Taproot (Merkle) tree in the script path uses hashes but the Merkle root of this tree tweaks the unhashed public key (internal key) and the resulting tweaked public key is not hashed either. For more details on why see the [reference 2](https://github.com/bitcoin/bips/blob/master/bip-0341.mediawiki#cite_ref-2-0) in BIP 341.

> **Comments:**
> **username_2**: Does that mean that there are roughly 2^256 possible Taproot addresses (eg pubkeys)?  
> **username_1**: Right, not quite 2^256 possible points on secp256k1 curve but pretty close https://bitcoin.stackexchange.com/questions/114135/how-does-ecdsa-work-when-generating-the-public-key/  

---

