Jonas Nick

Using Z3 with a smaller curve (P = 47, N1 = 59, N2 = 37) I verified (see See https://github.com/sipa/purify/commit/d195ee1522e63c375fa9da001e60f0d8a76d0187) that 1. There is no valid wire assignment with a...

> Hm, can you elaborate? I'm assuming that's because the order is too small for the "recipe" in section 5.1 of the paper. Perhaps @sipa knows more.

The scope of the library is defined in [CONTRIBUTING.md](https://github.com/bitcoin-core/secp256k1/blob/master/CONTRIBUTING.md#adding-new-functionality-or-modules). In particular, we recommend a specification and providing arguments for relevance in the Bitcoin space. I think a vague potential future...

Thanks for the ping. > my understanding is correct. MuSig is usually "parallelized" that way. The nonce can be likely attached to an earlier protocol message like the transaction submission...

I think we'd be happy to add more useful software to nix-bitcoin, but we don't add unmaintained or very experimental projects because the maintenance burden is generally not worth it....

There's a module in libsecp256k1-zkp that provides [half-aggregation](https://github.com/BlockstreamResearch/secp256k1-zkp/blob/master/include/secp256k1_schnorrsig_halfagg.h).

> Should we allow the "empty" aggsig (n=0)? `verify_aggregate` currently returns true for an "empty" aggsig (`s = 0`). I think that makes sense.

@GeneFerneau Great to hear that you're interested in Rust bindings for MuSig2. I'm not currently working on the Rust bindings (nor am I planning to if someone else volunteers :)...

Regarding the issue of identifying dishonest signers in the key generation phase, @real-or-random rightfully points out that transcript + signatures only helps if the signers already agree on the individual...

I added three commits to a forked branch that applies the global updates introduced with the recent sync of -zkp to upstream libsecp (see https://github.com/BlockstreamResearch/secp256k1-zkp/discussions/266): https://github.com/jonasnick/secp256k1-zkp/commits/frost-jn Feel free to cherry-pick.