Can you tell me which derivation scheme is used in Monero, as BIP32/44 is well defined for ECDSA only and not for EdDSA?


Bitcoin's HD (hierarchical deterministic) wallets use subsequent addresses derived from your private key / seed to send your change to and improve privacy a bit. You can still follow the funds and determine eg. from spending patterns or known destinations what actually was the spending amount(s) and what the change.

Monero's design focussed on mandatory privacy is completely different and a plain address never lands on the blockchain, a spender calculates a one time stealth address from the receivers public key / address and a random number. Only the receiver with his private key is able to determine, that an output is for him.

However, one can generate unlimited "HD" addresses which are called Subadresses in Monero which are generated similar to Bitcoin's HD addresses if you don't want to be linked externally eg. by different exchanges or your employer and your donation address on social media.

  • 1
    thank you for your answer :) It was very helpful.
    – Bart
    Jan 3 '20 at 7:24
  • @Bart thanks for your feedback! please mark it as "correct answer" if you don't need any more details.
    – janowitz
    Jan 4 '20 at 12:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.