134 / 600SCHNORR

Schnorr signature

The linear signature scheme standardized for Taproot, enabling key aggregation and simpler security proofs.

The linear signature scheme standardized for Taproot, enabling key aggregation and simpler security proofs.

Schnorr signature is best understood as part of a system rather than as an isolated definition. Its related coordinates show the mechanisms, incentives and historical records that give the term practical meaning.

Schnorr signature should be evaluated against a concrete threat model: what is protected, from whom, for how long and at what operational cost. A design may remove one dependency while introducing another, so custody, privacy and verification must be judged as a complete system.

Understanding Schnorr signature helps distinguish a verifiable Bitcoin mechanism or historical record from slogans, products and market narratives.

For the clearest picture, read this entry together with Taproot, MuSig2. The reverse links also lead from MuSig2, Andrew Poelstra.

01

Linked to related atlas coordinates

02

Grounded in a source record

03

Explains function and trade-offs

04

Part of the open Bitcoin knowledge graph

DOC · 001BIP340 — Schnorr SignaturesSpecification
Reviewed 25 July 2026Source-first · No investment advice