NestedMuSig2 Explorer
Learning NestedMuSig2
An interactive guide to nested multi-signatures on secp256k1, based on eprint 2026/223 by Nadav Kohen.
Step-by-Step Narrative
7 pages walking through the protocol from cosigner trees to verification.
Interactive Playground
Build custom cosigner trees, run the protocol step by step, inspect every intermediate value.
Real Cryptography
Uses real secp256k1 via @noble/curves, not toy numbers. Every signature verifies.
Protocol Overview
NestedMuSig2 is a recursive variant of MuSig2 for hierarchical signing groups, where leaves are individual signers and internal nodes aggregate subtree outputs.
Each level performs key and nonce aggregation, and Round 2 cascades coefficients and binding values from leaf to root. The final output is a standard Schnorr signature that is indistinguishable from flat MuSig2 to the verifier.