P' = P + H(P||S)G
d' = d + H(P||S)
Examples:
-
Pis a public key,Sis a bitcoin script with a locktime for a different Key(Q).
The owner ofPcan sign forP'and spend the output regularly(by signing withd').
OR the owner ofQcan providePandSand then get evaluated by S as a regular script. (and if the script evaluates to true he can get the money) -
Sis a hash of a document and this is used to timestamp data, not the best way since you need this to be able to sign on the transaction later and this isn't saved anywhere.