P' = P + H(P||S)G
d' = d + H(P||S)
Examples:
-
P
is a public key,S
is a bitcoin script with a locktime for a different Key(Q
).
The owner ofP
can sign forP'
and spend the output regularly(by signing withd'
).
OR the owner ofQ
can provideP
andS
and then get evaluated by S as a regular script. (and if the script evaluates to true he can get the money) -
S
is a hash of a document and this is used to timestamp data, not the best way since you need this to be able to sign on the transaction later and this isn't saved anywhere.