Hot answers tagged

2 votes
Accepted

Why does only one of the two nonce points in MuSig2 have the exponent b?

A slight variant of MuSig2, named MuSig2*, sets one of the coefficients to 1 to make the key aggregation function slightly more efficient. This is described in a draft specification of MuSig2 : ↩ ...
user avatar
2 votes
Accepted

In MuSig2 how is multiplication of coordinates defined?

TL;DR: the multiplication operation you're asking about is actually what you're used to seeing referred to as point adition (when talking about elliptic curves). The MuSig2 paper does not assume you'...
user avatar
2 votes

How does SpeedyMuSig compare to MuSig2?

SpeedyMusig requires each signer to collect all n nonce pairs (Ri,Si) as input to the hash which determines how they are combined for the final nonce. Musig2 allows a single untrusted aggregator to ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible