user135367: I am currently trying to understand the Lightning network using their whitepaper and BOLT#3.
However, I have some trouble to understand each public/private keys roles in the processus.
From what I understand here is the process (I call P public keys and K private keys):

Alice and Bob create a Funding transaction but before broadcasting it --> 2 P_a P_b OP_CheckMultisig

They create a commitment (C1a/b) in order to be able to retrieve their fund in case of problems.  They both sign it and give it to the counterparty (so Alice sign the C1b with K_a and give it to Bob and vice versa)


(I skip the part of RSMC,HTLC...)
HOWEVER, in BOLT#3 in find this:

Each commitment transaction uses a unique localpubkey, and a
remotepubkey

So I don't really understand, do Alice and Bob continue to sign using their private key ? (K_a and K_b) in order to be able to unlock the funding transaction? Are these new publics keys only used for signing new multisig Adress in HTLC and RSMC ?
I think that I am confused about:

which key to use and when
how can we still unlock the funding transaction using various keys

Thank you for your time, I am a newbie here and I hope I will find some help!
Best

user101498: The BOLT#3 quote you mention refers to the output(s) of each commitment transaction. Keys used in the to_local and to_remote outputs are rotated for each commitment transaction pair.
The commitment transactions are still signed using the funding output's keys.
Aside, note that while the Lightning paper at lightning.network does describe key ideas behind the payment channels in use today on the network it is very outdated. It for instance still makes use of NOINPUT-signed transactions which can be confusing if you start learning about the Lightning Network.
Deployable Lightning from Rusty Russell describes the fundamental changes, and the BOLTs describe what is actually in use today (which is also different). However, they intend to be detailed and prescriptive, not explanatory. If you are looking for an introduction to the Lightning Network, then the Lightning Network Book is probably a better resource.

135367: <p>I am currently trying to understand the Lightning network using their whitepaper and BOLT#3.</p>
<p>However, I have some trouble to understand each public/private keys roles in the processus.</p>
<p>From what I understand here is the process (I call P public keys and K private keys):</p>
<ol>
<li><p>Alice and Bob create a Funding transaction but before broadcasting it --&gt; 2 P_a P_b OP_CheckMultisig</p>
</li>
<li><p>They create a commitment (C1a/b) in order to be able to retrieve their fund in case of problems.  They both sign it and give it to the counterparty (so Alice sign the C1b with K_a and give it to Bob and vice versa)</p>
</li>
</ol>
<p>(I skip the part of RSMC,HTLC...)</p>
<p>HOWEVER, in BOLT#3 in find this:</p>
<blockquote>
<p>Each commitment transaction uses a unique localpubkey, and a
remotepubkey</p>
</blockquote>
<p>So I don't really understand, do Alice and Bob continue to sign using their private key ? (K_a and K_b) in order to be able to unlock the funding transaction? Are these new publics keys only used for signing new multisig Adress in HTLC and RSMC ?</p>
<p>I think that I am confused about:</p>
<ol>
<li>which key to use and when</li>
<li>how can we still unlock the funding transaction using various keys</li>
</ol>
<p>Thank you for your time, I am a newbie here and I hope I will find some help!</p>
<p>Best</p>
 101498: <p>The BOLT#3 quote you mention refers to the output(s) of each commitment transaction. Keys used in the <code>to_local</code> and <code>to_remote</code> outputs are rotated for each commitment transaction pair.</p>
<p>The commitment transactions are still signed using the funding output's keys.</p>
<p>Aside, note that while the Lightning paper at <a href="https://lightning.network/" rel="nofollow noreferrer">lightning.network</a> does describe key ideas behind the payment channels in use today on the network it is very outdated. It for instance still makes use of <code>NOINPUT</code>-signed transactions which can be confusing if you start learning about the Lightning Network.<br />
<a href="https://github.com/ElementsProject/lightning/blob/master/doc/deployable-lightning.pdf" rel="nofollow noreferrer">Deployable Lightning</a> from Rusty Russell describes the fundamental changes, and the BOLTs describe what is actually in use today (which is also different). However, they intend to be detailed and prescriptive, not explanatory. If you are looking for an introduction to the Lightning Network, then the <a href="https://github.com/renepickhardt/The-Lightning-Network-Book" rel="nofollow noreferrer">Lightning Network Book</a> is probably a better resource.</p>
