Questions tagged [cross-input-signature-aggregation]

Filter by
Sorted by
Tagged with
5
votes
2answers
236 views

What is cross-input signature aggregation and how would it work?

I'm seeing lots of mentions of cross-input signature aggregation (CISA) lately. It appears to be something that one can do with Schnorr signatures. What is the main idea of CISA? What would a ...
4
votes
1answer
225 views

Will cross-input signature aggregation need a new output type?

If cross-input signature aggregation were to get implemented in a subsequent soft fork after Taproot's activation, would its use require a new output type?
6
votes
3answers
314 views

What block space savings would we get for coinjoins (and payjoins) if we had cross input signature aggregation?

What block space savings (specific numbers in weight units or vbytes) would we achieve for coinjoins (and payjoins) if we had cross input signature aggregation (post a speculative future soft fork ...
5
votes
1answer
212 views

What is the difference between key aggregation and signature aggregation?

What is the difference between key aggregation (e.g. MuSig) and signature aggregation? Many people (including myself) have in the past used these terms interchangeably. Why is it important to be ...
3
votes
1answer
746 views

What makes cross input signature aggregation complicated to implement?

What makes cross input signature aggregation complicated to implement? Other than for design space reasons why didn't it make it into BIP-Taproot? (Key aggregation within one input can be achieved ...
8
votes
2answers
686 views

How could Schnorr signatures be aggregated across the whole transaction?

I am studying the MuSig protocol and am having trouble grasping certain segments. This is my understanding thus far: In current Bitcoin CHECKMULTISIG format, the size of the signature grows linearly ...