NestedMuSig2 Enables Recursive Schnorr Aggregation
Nadav Kohen of Chaincode Labs introduced NestedMuSig2, a recursive extension of MuSig2 that enables trees of aggregated cosigners to generate BIP340 Schnorr signatures while preserving indistinguishability and non-interactive key aggregation. The paper provides a security reduction to the AOMDL assumption in the random oracle model, formalizing the safety of nesting MuSig2 keys in higher-level constructions.
eprint.iacr.org
🔗
Nested MuSig2
Bitcoin Improvement Proposal 327 specifies a variant of the MuSig2 multi-signature protocol that is becoming widely adopted in Bitcoin applications. This protocol enables multiple participants to collaboratively compute (BIP 340) Schnorr signatures for a single aggregate public key efficiently, while preventing external parties from distinguishing whether multiple signers were involved.