Questions tagged [cross-input-signature-aggregation]

Filter by
Sorted by
Tagged with
0 votes
1 answer
26 views

one address multiple inputs one signature scheme

I have an idea and would like to know if current or future technology can allow it : Assume 100 people with index i each people has secret Ri Secrets Ri are combined via an abstract mechanism to ...
  • 1
8 votes
2 answers
895 views

What is cross-input signature aggregation and how would it work?

I'm seeing lots of mentions of cross-input signature aggregation (CISA) lately. It appears to be something that one can do with Schnorr signatures. What is the main idea of CISA? What would a ...
  • 65.4k
6 votes
1 answer
355 views

Will cross-input signature aggregation need a new output type?

If cross-input signature aggregation were to get implemented in a subsequent soft fork after Taproot's activation, would its use require a new output type?
  • 65.4k
7 votes
3 answers
450 views

What block space savings would we get for coinjoins (and payjoins) if we had cross input signature aggregation?

What block space savings (specific numbers in weight units or vbytes) would we achieve for coinjoins (and payjoins) if we had cross input signature aggregation (post a speculative future soft fork ...
6 votes
1 answer
402 views

What is the difference between key aggregation and signature aggregation?

What is the difference between key aggregation (e.g. MuSig) and signature aggregation? Many people (including myself) have in the past used these terms interchangeably. Why is it important to be ...
4 votes
1 answer
912 views

What makes cross input signature aggregation complicated to implement?

What makes cross input signature aggregation complicated to implement? Other than for design space reasons why didn't it make it into BIP-Taproot? (Key aggregation within one input can be achieved ...
9 votes
2 answers
1k views

How could Schnorr signatures be aggregated across the whole transaction?

I am studying the MuSig protocol and am having trouble grasping certain segments. This is my understanding thus far: In current Bitcoin CHECKMULTISIG format, the size of the signature grows linearly ...
  • 111