Schnorr signatures are digital signatures that provide similar security to the ECDSA scheme used since Bitcoin’s original implementation and which can use Bitcoin’s same elliptic curve parameters, but which can provide other benefits.
Schnorr is secure under the same cryptographic assumptions as ECDSA and it is easier and faster to create secure multiparty signatures using schnorr with protocols such as MuSig. A new signature type also provides an opportunity to change the signature serialization format from BER/DER to something that’s more compact and simpler to implement.
Primary code and documentation
Optech newsletter and website mentions
- 2019-11-13 Blog post about x-only pubkeys for use in schnorr signature schemes
- 2019-10-29 Bitcoin Optech schnorr/taproot workshop
- 2019-10-23 Announcement of structured taproot review (including schnorr)
- 2019-10-16 Talk summary: the quest for practical threshold Schnorr signatures
- 2019-10-16 Update on changes to schnorr, taproot, and tapscript
- 2019-08-14 Proposed change to schnorr pubkeys
- 2019-07-14 Executive briefing: the next soft fork
- 2018-07-17 Continued bip-schnorr discussion
- 2018-07-10 Proposed schnorr BIP