# Gavin Andresen
# 2012-01-06 15:04:10
# https://bitcointalk.org/index.php?topic=56839.msg677536#msg677536

Just thinking out loud... @p{par}

... but vanity addresses using 1-of-2 multisignature transactions and BIP 13's new bitcoin address format could be orders of magnitude easier to generate. @p{par}

You'd start with a normal keypair. @p{par}

And simply compute the hash of the public key and another, arbitrary, "I don't have the private key but I don't care" public key (in an "OP_1 @p{lt}public_key@s{gt} @p{lt}don't care public key@s{gt} OP_2 OP_CHECKMULTISIG" transaction type). @p{par}

You'd always spend the funds sent to the vanity address using pk1. @p{par}

No expensive ECDSA addition or multiplication required, just lots of SHA256/RIPEMD160 hashing and base58 encoding and string comparing. @p{par}

@p{@p{--}-}@p{@p{--}-}@p{@p{--}-}@p{--} @p{par}

Widespread use of the new pay-to-script address format will have to wait until "everybody" upgrades to support it, though. And it does make transactions larger (2 public keys instead of 1) than the find-the-right-private-key solution. @p{par}