Questions tagged [cross-input-signature-aggregation]
The cross-input-signature-aggregation tag has no usage guidance.
8
questions
1
vote
1
answer
68
views
Is there a particular order in which transaction inputs are checked for script validity?
When a transaction is being checked for validity, is there a particular order that the inputs are evaluated for script correctness?
This might be relevant when determining what consensus changes might ...
0
votes
1
answer
36
views
one address multiple inputs one signature scheme
I have an idea and would like to know if current or future technology can allow it :
Assume 100 people with index i
each people has secret Ri
Secrets Ri are combined via an abstract mechanism to ...
9
votes
2
answers
1k
views
What is cross-input signature aggregation and how would it work?
I'm seeing lots of mentions of cross-input signature aggregation (CISA) lately. It appears to be something that one can do with Schnorr signatures. What is the main idea of CISA? What would a ...
7
votes
1
answer
412
views
Will cross-input signature aggregation need a new output type?
If cross-input signature aggregation were to get implemented in a subsequent soft fork after Taproot's activation, would its use require a new output type?
7
votes
3
answers
534
views
What block space savings would we get for coinjoins (and payjoins) if we had cross input signature aggregation?
What block space savings (specific numbers in weight units or vbytes) would we achieve for coinjoins (and payjoins) if we had cross input signature aggregation (post a speculative future soft fork ...
7
votes
1
answer
576
views
What is the difference between key aggregation and signature aggregation?
What is the difference between key aggregation (e.g. MuSig) and signature aggregation?
Many people (including myself) have in the past used these terms interchangeably. Why is it important to be ...
5
votes
1
answer
1k
views
What makes cross input signature aggregation complicated to implement?
What makes cross input signature aggregation complicated to implement? Other than for design space reasons why didn't it make it into BIP-Taproot? (Key aggregation within one input can be achieved ...
12
votes
2
answers
1k
views
How could Schnorr signatures be aggregated across the whole transaction?
I am studying the MuSig protocol and am having trouble grasping certain segments. This is my understanding thus far:
In current Bitcoin CHECKMULTISIG format, the size of the signature grows linearly ...