Questions tagged [schnorr-signatures]
The schnorr-signatures tag has no usage guidance.
6
votes
1answer
268 views
Will a Schnorr soft-fork introduce a new address format (i.e. not bech32)
When we (hopefully) soft-fork to Schnorr signatures will the address be indistinguishable from bech32 addresses?
1
vote
1answer
47 views
Can R/r in Musig be derived from only seeds and message hashes?
I am wondering if the first two roundtrips of pre-committing and then revealing R/r in MuSig signing can be moved to the keygen phase and made deterministic. That reduces the amount of messages that ...
2
votes
1answer
73 views
Schnorr batch validation speed statistics
In this question Schnorr vs ECDSA I see in the Peter Wuille's answer the following comment about Schnorr signature batch validation: "Improving verification speed, by supporting batch validation of ...
11
votes
1answer
207 views
Schnorr's batch validation
In the recent BIP about Schnorr's standardization, Pieter Wuille presents an algorithm for batch validation. In my understanding the most heavy operation is the multiplication by a scalar: to make ...
1
vote
0answers
24 views
What would UTXO consolidation look like in the public ledger with Schnorr signatures?
I am excited about the privacy and optimisations involved with moving from ECDSA to Schnorr signatures. One of the privacy improvements, as I understand it, is that you can aggregate signatures so ...
3
votes
1answer
104 views
A couple of questions on Schnorr sig
In the BIP by Pieter Wuille it is told that the key prefixed version of Schnorr signature is needed when the scheme is used in combination with BIP32's unhardened derivation. Could someone provide an ...
1
vote
1answer
57 views
Could Taproot or Graftroot enable the execution of complex scripts?
From my understanding, Taproot uses a Merkle Tree structure whose root represents the outcome of a script. That representation is in the form of a signature that may unlock the inputs associated with ...
0
votes
0answers
19 views
Signature Aggregation
I was reading this post https://blockstream.com/2018/01/23/musig-key-aggregation-schnorr-signatures.html . For each scheme it described, the post said that all R points would be calculated with a ...
2
votes
2answers
131 views
How is the construction of atomic swaps improved by Schnorr?
How does the availability of Schnorr signatures improve the ability to perform cross-chain atomic swaps?
1
vote
0answers
30 views
Can you use Schnorr to sign inputs individually?
Can personA build a transaction and sign his inputs, then personB signs his and that be added into one transaction using Schnorr. Or are SIGHASHes still needed?
2
votes
1answer
231 views
Why was ECDSA chosen over Schnorr Signatures in the inital design?
Schnorr Signatures and Signature aggregation is in the bitcoin technology roadmap. Schnorr Signatures was around the same time ECDSA is around.
Why wasnt Schnorr Signature Scheme implemented at the ...
0
votes
0answers
34 views
How do I explain Schnorr signatures and signature aggregation to 7 year old cousin?
How do I explain Schnorr signatures and signature aggregation to my 7 year old cousin?
Nathan Aw
2
votes
1answer
57 views
How do Schnorr signatures impact coin selection and the utxo growth?
Will Schnorr signature incentivise different practices in coin selection? How do they impact the utxo set in the long run?
0
votes
0answers
40 views
Compact Schnorr signature?
(Please correct me if I'm wrong)
The commonly-used ECDSA signature consists of 2 scalars (r,s).
There's also a Schnorr signature. Given private key k, public key kG and the message M:
Generate ...
1
vote
0answers
42 views
aggregated signatures for combining payments over a low bandwidth mesh network
Background
I'm researching how in a low bandwidth mesh network payment transactions from nodes can be combined to reduce the bandwidth used for payments. Aggregated signatures seem like a useful ...
4
votes
1answer
720 views
Replacing ECDSA (SECP256k1) with Schnorr signatures
On March 23, 2017 the Bitcoin Core team published a technology roadmap, expressing their intent to replace ECDSA (SECP256k1) with Schnorr signatures: https://bitcoincore.org/en/2017/03/23/schnorr-...
2
votes
1answer
726 views
Are Schnorr signatures quantum-computer resistant?
Here (https://bitcoincore.org/en/2017/03/23/schnorr-signature-aggregation/) it says Schnorr replaces ECDSA, we know that ECDSA can be broken by quantum computers. Can Schnorr be broken by q-computers ...
8
votes
1answer
758 views
Why was the Schnorr code removed from Bitcoin Core?
I was looking for the Schnorr implementation in Bitcoin Core and was surprised to see that it was removed on Nov 2016 (commit e06e878fd7dcc99825025fa99aedb86bc7d5c29f). Why was the source code ...
3
votes
1answer
289 views
Does the introduction of Schnorr signatures require segwit?
What is the relationship of segwit and Schnorr signatures? Is segwit a prerequisit for Schnorr signatures?
I've read that the transaction versioning of Segregated Witness would allow to just assign ...
3
votes
0answers
145 views
How does schnorr signature construct multisig functionality?
How does the multiparty schnorr signature work and enable multisig
functionality in Bitcoin?
What are its limitations? Can we construct any m of n signature?
Is there anyway to hide the signers among ...
23
votes
3answers
4k views
What are the implications of Schnorr signatures?
Adam Back (adam3us) explained in March, 2014, but it is all math. There's another short post with advantages, though.
This answer on crypto.SE claims that Bitcoin considered using Ed25519 which is ...
