Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [schnorr-signatures]

The tag has no usage guidance.

6
votes
1answer
268 views

Will a Schnorr soft-fork introduce a new address format (i.e. not bech32)

When we (hopefully) soft-fork to Schnorr signatures will the address be indistinguishable from bech32 addresses?
1
vote
1answer
47 views

Can R/r in Musig be derived from only seeds and message hashes?

I am wondering if the first two roundtrips of pre-committing and then revealing R/r in MuSig signing can be moved to the keygen phase and made deterministic. That reduces the amount of messages that ...
2
votes
1answer
73 views

Schnorr batch validation speed statistics

In this question Schnorr vs ECDSA I see in the Peter Wuille's answer the following comment about Schnorr signature batch validation: "Improving verification speed, by supporting batch validation of ...
11
votes
1answer
207 views

Schnorr's batch validation

In the recent BIP about Schnorr's standardization, Pieter Wuille presents an algorithm for batch validation. In my understanding the most heavy operation is the multiplication by a scalar: to make ...
1
vote
0answers
24 views

What would UTXO consolidation look like in the public ledger with Schnorr signatures?

I am excited about the privacy and optimisations involved with moving from ECDSA to Schnorr signatures. One of the privacy improvements, as I understand it, is that you can aggregate signatures so ...
3
votes
1answer
104 views

A couple of questions on Schnorr sig

In the BIP by Pieter Wuille it is told that the key prefixed version of Schnorr signature is needed when the scheme is used in combination with BIP32's unhardened derivation. Could someone provide an ...
1
vote
1answer
57 views

Could Taproot or Graftroot enable the execution of complex scripts?

From my understanding, Taproot uses a Merkle Tree structure whose root represents the outcome of a script. That representation is in the form of a signature that may unlock the inputs associated with ...
0
votes
0answers
19 views

Signature Aggregation

I was reading this post https://blockstream.com/2018/01/23/musig-key-aggregation-schnorr-signatures.html . For each scheme it described, the post said that all R points would be calculated with a ...
2
votes
2answers
131 views

How is the construction of atomic swaps improved by Schnorr?

How does the availability of Schnorr signatures improve the ability to perform cross-chain atomic swaps?
1
vote
0answers
30 views

Can you use Schnorr to sign inputs individually?

Can personA build a transaction and sign his inputs, then personB signs his and that be added into one transaction using Schnorr. Or are SIGHASHes still needed?
2
votes
1answer
231 views

Why was ECDSA chosen over Schnorr Signatures in the inital design?

Schnorr Signatures and Signature aggregation is in the bitcoin technology roadmap. Schnorr Signatures was around the same time ECDSA is around. Why wasnt Schnorr Signature Scheme implemented at the ...
0
votes
0answers
34 views

How do I explain Schnorr signatures and signature aggregation to 7 year old cousin?

How do I explain Schnorr signatures and signature aggregation to my 7 year old cousin? Nathan Aw
2
votes
1answer
57 views

How do Schnorr signatures impact coin selection and the utxo growth?

Will Schnorr signature incentivise different practices in coin selection? How do they impact the utxo set in the long run?
0
votes
0answers
40 views

Compact Schnorr signature?

(Please correct me if I'm wrong) The commonly-used ECDSA signature consists of 2 scalars (r,s). There's also a Schnorr signature. Given private key k, public key kG and the message M: Generate ...
1
vote
0answers
42 views

aggregated signatures for combining payments over a low bandwidth mesh network

Background I'm researching how in a low bandwidth mesh network payment transactions from nodes can be combined to reduce the bandwidth used for payments. Aggregated signatures seem like a useful ...
4
votes
1answer
720 views

Replacing ECDSA (SECP256k1) with Schnorr signatures

On March 23, 2017 the Bitcoin Core team published a technology roadmap, expressing their intent to replace ECDSA (SECP256k1) with Schnorr signatures: https://bitcoincore.org/en/2017/03/23/schnorr-...
2
votes
1answer
726 views

Are Schnorr signatures quantum-computer resistant?

Here (https://bitcoincore.org/en/2017/03/23/schnorr-signature-aggregation/) it says Schnorr replaces ECDSA, we know that ECDSA can be broken by quantum computers. Can Schnorr be broken by q-computers ...
8
votes
1answer
758 views

Why was the Schnorr code removed from Bitcoin Core?

I was looking for the Schnorr implementation in Bitcoin Core and was surprised to see that it was removed on Nov 2016 (commit e06e878fd7dcc99825025fa99aedb86bc7d5c29f). Why was the source code ...
3
votes
1answer
289 views

Does the introduction of Schnorr signatures require segwit?

What is the relationship of segwit and Schnorr signatures? Is segwit a prerequisit for Schnorr signatures? I've read that the transaction versioning of Segregated Witness would allow to just assign ...
3
votes
0answers
145 views

How does schnorr signature construct multisig functionality?

How does the multiparty schnorr signature work and enable multisig functionality in Bitcoin? What are its limitations? Can we construct any m of n signature? Is there anyway to hide the signers among ...
23
votes
3answers
4k views

What are the implications of Schnorr signatures?

Adam Back (adam3us) explained in March, 2014, but it is all math. There's another short post with advantages, though. This answer on crypto.SE claims that Bitcoin considered using Ed25519 which is ...