BIP-327

MuSig2 for BIP340-compatible Multi-Signatures

bitcoin L1 multi-sig final secp256k1

Native status: Deployed
Enables: Schnorr-based aggregation
Specification: https://github.com/bitcoin/bips/blob/master/bip-0327.mediawiki

MuSig2 produces a single BIP-340 Schnorr signature from n signers; its security rests on the algebraic one-more discrete-logarithm assumption, a falsifiable hardness assumption shared with many ZK constructions.

Implementations

libsecp256k1 c not independently audited

Relationships

Depends on: BIP-340