Questions tagged [cross-input-signature-aggregation]
8 questions
11
votes
2 answers
How could Schnorr signatures be aggregated across the whole transaction?
I am studying the MuSig protocol and am having trouble grasping certain segments. This is my understanding thus far:
In current Bitcoin CHECKMULTISIG format, the size of the signature grows linearly with the number of additional "m" signers. The way…
Jayyy777
- 131
- 4
8
votes
2 answers
What is cross-input signature aggregation and how would it work?
I'm seeing lots of mentions of cross-input signature aggregation (CISA) lately. It appears to be something that one can do with Schnorr signatures. What is the main idea of CISA? What would a transaction look like that makes use of CISA?
Murch
- 71,155
- 33
- 180
- 600
7
votes
3 answers
What block space savings would we get for coinjoins (and payjoins) if we had cross input signature aggregation?
What block space savings (specific numbers in weight units or vbytes) would we achieve for coinjoins (and payjoins) if we had cross input signature aggregation (post a speculative future soft fork that enabled it)?
This question was asked by Mario…
Michael Folkson
- 14,337
- 3
- 11
- 45
6
votes
1 answer
Will cross-input signature aggregation need a new output type?
If cross-input signature aggregation were to get implemented in a subsequent soft fork after Taproot's activation, would its use require a new output type?
Murch
- 71,155
- 33
- 180
- 600
6
votes
1 answer
What is the difference between key aggregation and signature aggregation?
What is the difference between key aggregation (e.g. MuSig) and signature aggregation?
Many people (including myself) have in the past used these terms interchangeably. Why is it important to be careful to use the correct term in its correct…
Michael Folkson
- 14,337
- 3
- 11
- 45
4
votes
1 answer
What makes cross input signature aggregation complicated to implement?
What makes cross input signature aggregation complicated to implement? Other than for design space reasons why didn't it make it into BIP-Taproot? (Key aggregation within one input can be achieved with MuSig, MuSig2 etc but signatures cannot be…
Michael Folkson
- 14,337
- 3
- 11
- 45
1
vote
1 answer
Is there a particular order in which transaction inputs are checked for script validity?
When a transaction is being checked for validity, is there a particular order that the inputs are evaluated for script correctness?
This might be relevant when determining what consensus changes might be practical to design. For example, if we…
James O'Beirne
- 321
- 8
0
votes
1 answer
one address multiple inputs one signature scheme
I have an idea and would like to know if current or future technology can allow it :
Assume 100 people with index i
each people has secret Ri
Secrets Ri are combined via an abstract mechanism to produce a public root address P0
everybody from Root…
andre
- 1
- 2