Multiparty signatures



Summary:

The conversation is discussing the musig construction and how it can be used in m of n multisig. The musig construction involves hashing all keys and summing the multiples to compute the shared blinding factor, which improves the system. This results in a nice Shamir m of n multisig with a single signature and all the same properties otherwise. In response to this, Russell O'Connor raises a concern about multiparty signature attacks where an attacker can modify more than one variable. In a coin-join protocol where every other participant could be the same attacker representing themselves as multiple participants, the attacker can get their hands on multiple variables.


Updated on: 2023-06-13T03:54:19.202520+00:00