18.3: Using Bitcoin with MuSig2
Bitcoin multisigs can't be naively created using Schnorr. If you just aggregate two keys, it's possible to cancel out one of the keys (provided you know the public key you're cancelling) and then sign with the other key. To resolve…