The Chaincode Podcast

Pieter Wuille and Tim Ruffing, Schnorr, MuSig, FROST and more - Episode 26

Pieter Wuille and Tim Ruffing treat us to a conversation about Schnorr, multi-signatures, MuSig, and more. We covered a lot so this is part one of a two part conversation. We discussed: - When to roll your own cryptograp...

2022-12-16

Episode notes

Pieter Wuille and Tim Ruffing treat us to a conversation about Schnorr, multi-signatures, MuSig, and more. We covered a lot so this is part one of a two part conversation.




We discussed:


- When to roll your own cryptography (01:31)


- Schnorr Signatures (09:01)


  - Why is Schnorr preferable to ECDSA? (10:55)


- Schnorr efficiency improvements (15:52)


- Multisigs (23:16)


- MuSig (25:07)


  - Yannick Seurin


  - Rogue key attack or key cancellation attack (31:00)


  - Bellare-Neven (32:12)


- Interactive versus non-interactive protocols (35:30)


- FROST (42:42)