MempoolViz

Local Node

Taproot Playground 🌱

Visualize Schnorr Signatures and Key Aggregation (MuSig).

Signers (MuSig)

Alice

Priv: 123 | Pub: Pt(A)

Bob

Priv: 456 | Pub: Pt(B)

Aggregation Magic

Aggregate Public Key (The Lock)

P_agg = Pt(A) + Pt(B)

To the blockchain, this looks like a single normal public key. Observers cannot distinguish this Multisig from a singleuser wallet!

Aggregate Signature (The Key)

# Partial Signatures:

s_1 = r_1 + H(...) * x_1(Partial)

s_2 = r_2 + H(...) * x_2(Partial)

S_agg = ∑ s_i(Final Sig)

Total Combined Private Scalar

579

Linearity

Schnorr signatures are linear.
Sig(A) + Sig(B) = Sig(A+B).
This allows multiple parties to combine keys and signatures into one, saving space and privacy.

Efficiency

Aggregated signatures look like a single signature on-chain. This makes multisig transactions cheaper and indistinguishable from regular ones.

Simplicity

Unlike ECDSA, Schnorr signatures are provably secure and non-malleable by default, making them the gold standard for modern Bitcoin.