Recent Developments on Multi-Party Schnorr Signatures
summary
Survey of concrete results and deployments: several schemes (Musig→Musig2, FROST, MuSig2 variants, DWMS, Speedy) move from broken two‑round designs to three‑round commit‑reveal patterns to resist concurrent security (raw attacks); Musig2 is actively adopted in Bitcoin and FROST in Zcash; recent work adds robustness for large N but at the cost of extra rounds; only Sparkle claims adaptive security without secure erasures; NIST submissions (FROST team) target standardization in early 2025.
AI-written summary · about
chapters (25)
- 0:00Introduction
- 0:25Secret keys and signatures
- 1:11Cryptographic secret key
- 2:18Digital signatures security
- 3:20Schnorr signatures technically
- 4:26Why Schnorr preferred
- 5:56History and standardization
- 7:22Multi-party Schnorr matters
- 8:24Threshold vs multi-signature
- 9:48Key properties
- 10:52Recent developments
- 11:56Concurrent security and RAWs
- 13:19Three-round schemes
- 14:00Two-round schemes
- 15:24Security notions
- 17:12Robust schemes
- 18:45Standardization and adoption
- 19:50Adaptive security
- 21:13Deterministic and probabilistic
- 22:15Distributed key generation
- 23:19NIST call and future
- 24:53Comparison with RSA and ECDSA
- 26:40Threshold BLS advantages
- 27:01Frost standardization
- 27:21Key takeaways and open challenges
related talks
19mWhy Multisig is Important – And How to do it Right
36mUpdate on the NIST standardization of additional signature schemes
27mMulti Vendor Multisig
26mFragile Nonce Selection and ZKPs as a Solution
23mFrostsnap: Self Custody Designed for Million Dollar Bitcoin
55mSigma Protocols
01h 31mIntroduction to Secure Multi-Party Computation
21mFuture of Multisigs