Questions tagged [cross-input-signature-aggregation]

Filter by
Sorted by
Tagged with
1 vote
1 answer
68 views

Is there a particular order in which transaction inputs are checked for script validity?

When a transaction is being checked for validity, is there a particular order that the inputs are evaluated for script correctness? This might be relevant when determining what consensus changes might ...
James O'Beirne's user avatar
0 votes
1 answer
36 views

one address multiple inputs one signature scheme

I have an idea and would like to know if current or future technology can allow it : Assume 100 people with index i each people has secret Ri Secrets Ri are combined via an abstract mechanism to ...
andre's user avatar
  • 21
9 votes
2 answers
1k views

What is cross-input signature aggregation and how would it work?

I'm seeing lots of mentions of cross-input signature aggregation (CISA) lately. It appears to be something that one can do with Schnorr signatures. What is the main idea of CISA? What would a ...
Murch's user avatar
  • 72.8k
7 votes
1 answer
412 views

Will cross-input signature aggregation need a new output type?

If cross-input signature aggregation were to get implemented in a subsequent soft fork after Taproot's activation, would its use require a new output type?
Murch's user avatar
  • 72.8k
7 votes
3 answers
534 views

What block space savings would we get for coinjoins (and payjoins) if we had cross input signature aggregation?

What block space savings (specific numbers in weight units or vbytes) would we achieve for coinjoins (and payjoins) if we had cross input signature aggregation (post a speculative future soft fork ...
Michael Folkson's user avatar
7 votes
1 answer
576 views

What is the difference between key aggregation and signature aggregation?

What is the difference between key aggregation (e.g. MuSig) and signature aggregation? Many people (including myself) have in the past used these terms interchangeably. Why is it important to be ...
Michael Folkson's user avatar
5 votes
1 answer
1k views

What makes cross input signature aggregation complicated to implement?

What makes cross input signature aggregation complicated to implement? Other than for design space reasons why didn't it make it into BIP-Taproot? (Key aggregation within one input can be achieved ...
Michael Folkson's user avatar
12 votes
2 answers
1k views

How could Schnorr signatures be aggregated across the whole transaction?

I am studying the MuSig protocol and am having trouble grasping certain segments. This is my understanding thus far: In current Bitcoin CHECKMULTISIG format, the size of the signature grows linearly ...
Jayyy777's user avatar
  • 141