How does Schnorr's linearity let a thousand signers produce one signature — and why does the same property let Bob write Alice out of her own multisig?
Loading…
Schnorr linearity: how key aggregation works, and the two attacks that exploit it