Schnorr Signatures ·
s·G = R + e·P
un
seel
.com · BIP-340 · The linear discrete-log signature
s = k + e·x
—
Sig bytes
0
State
—
Generator G · point
Public key P = x·G
Nonce R = k·G
Secret / leak
▶ Play
←
→
🔇 Unmute
Reset
Un
seel
.com · Schnorr Signatures
Un
seel
.com · Schnorr Signatures: The Linear Math Behind Taproot and MuSig