Author: ZmnSCPxj 2023-07-24 10:50:13+00:00
Published on: 2023-07-24T10:50:13+00:00
Tom, MuSig2 requires multiple `R` points from signatories, unlike MuSig1. These points are aggregated using the MuSig() public key compose function. This prevents party 2 from creating an `R` that could allow certain attacks. MuSig1 requires 3 round trips, while MuSig2 requires at least 2 `R` nonces per signatory.
Updated on: 2023-08-11T15:37:16.894287+00:00