Questions tagged [schnorr-signatures]
The schnorr-signatures tag has no usage guidance.
16
questions
50
votes
5
answers
58k
views
How do you get a Bitcoin Public Key from a Private Key
How do I, in extreme specificity, convert a given private bitcoin key into a public bitcoin key (Talk to me like I'm 5 and I have to do this step by step or the evil witch will cook me alive in her ...
- 1,416
15
votes
1
answer
5k
views
What are the advantages of Schnorr vs ECDSA?
I understand that Schnorr signatures provide an improvement on ECDSA in that they are a fixed 64 bytes instead of the longer ECDSA sig format, however, I don't see how this is an advantage over ECDSA ...
- 253
9
votes
2
answers
3k
views
Are Schnorr signatures quantum-computer resistant?
Here (https://bitcoincore.org/en/2017/03/23/schnorr-signature-aggregation/) it says Schnorr replaces ECDSA, we know that ECDSA can be broken by quantum computers. Is Schnorr safe from q-computers?
- 10.1k
6
votes
2
answers
394
views
Why is no security lost by using 32-byte public keys in Schnorr signatures instead of 33?
There is currently a discussion on the mailing list about truncating the 33rd byte from public keys when used in bip-schnorr.
Public keys are (x, y) coordinates and compressed public keys simply ...
- 4,992
5
votes
3
answers
1k
views
What are some interesting applications of Taproot "smart contracts"?
From a strictly technical perspective, MAST makes a lot of sense. However, understanding it in the context of Taproot/Tapscript does require prior knowledge in Merkle Trees and hash functions.
What ...
- 53
26
votes
3
answers
5k
views
What are the implications of Schnorr signatures?
Adam Back (adam3us) explained in March, 2014, but it is all math. There's another short post with advantages, though.
This answer on crypto.SE claims that Bitcoin considered using Ed25519 which is ...
- 897
14
votes
1
answer
768
views
Schnorr's batch validation
In the recent BIP about Schnorr's standardization, Pieter Wuille presents an algorithm for batch validation. In my understanding the most heavy operation is the multiplication by a scalar: to make ...
- 143
11
votes
1
answer
774
views
When Schnorr signatures are part of Bitcoin will it be possible validate each block with only one signature validation?
In a recent talk Pieter Wuille talked about speed up verification when using Schnorr signatures and various algorithms for verifying multiple signatures.
Would it really be possible to verify one ...
- 11.8k
8
votes
1
answer
742
views
Will Schnorr Multi-signatures completely replace ECDSA?
I stumbled upon the fact that schnorr signatures will most probably replace the current ECDSA system in a future BIP.
Is it worth learning about ECDSA or this will become obsolete/useless/confusing ...
- 2,770
5
votes
1
answer
1k
views
What makes cross input signature aggregation complicated to implement?
What makes cross input signature aggregation complicated to implement? Other than for design space reasons why didn't it make it into BIP-Taproot? (Key aggregation within one input can be achieved ...
- 14.7k
3
votes
1
answer
486
views
Why is the tag repeated twice in a tagged hash?
I noticed that the hash message for the tagged hash in BIP340 is prefixed with SHA256(tag) || SHA256(tag), which also describes the reason
Because this is a 64-byte long context-specific constant and ...
- 127
3
votes
1
answer
174
views
Which MuSig scheme is optimal? Classic MuSig or this new MuSig-DN scheme?
Now we have two competing MuSig schemes which is better? Classic MuSig or MuSig-DN? Which use case(s) might choose classic MuSig over MuSig-DN and vice versa?
- 14.7k
2
votes
2
answers
211
views
Can you do P2WSH / P2SH on Lightning Network (LN)?
I understand that a channel is a 2 of 2 multisig:
1 && 1
Is it possible that one side of this channel is a multisig wallet?
So in essence one of the 2 main, is actually a 2 of 3 multisig. ...
- 82
1
vote
1
answer
229
views
I'm digging further into the open Taproot PR. Can you explain the BIP340 test vectors?
I'm digging further into the open Taproot PR. I found these BIP340 test vectors.
They have secret keys, public keys, aux_rand (auxiliary randomness), message, signature and whether the signature ...
- 14.7k
0
votes
0
answers
80
views
How does tweaking work for x-only keys, and what is not good in the example I gave?
How does normal key tweaking work in case of Schnorr digital signature schemes?
For all examples I am using online tool for point multiplication and point addition. (I suggest you to use them if it is ...
- 522
0
votes
1
answer
89
views
In MuSig2 how is multiplication of coordinates defined?
In the MuSig2 paper each signer multiplies all the nonces together (in the naive version):
R_1 * R_2 * R_3 * .... R_n
where R_i = r_i * G. r_i is a scalar and G is the generator point (coordinate) ...
- 14.7k