Super Testnet's avatar
Super Testnet 3 months ago
Yes, a musig would be more efficient. I have never used musig in a demo except a demo of musig itself, because I find it hard to implement and not worth it for a proof of concept. A real implementation should probably use musig for greater efficiency.

Replies (1)

in this case you wouldn't even have co-op signing, so you can skip the fancy parts. a simple aggregate public key would do. if you go multiplicative, a·b·G instead of (a+b)G then it's basically a DH key exchange. A·b = a·B, so Alice and Bob just reveal each other their pubkey for the session, and then both can generate the same address.