Quote from: achow101 on January 29, 2018, 01:27:05 AM

This is completely incorrect, did you even read the paper or the linked blog post?

As I said earlier, MuSig is only a n-of-n scheme so this concern is completely invalid. To do k-of-n, additional work is required.

i read it. and then thought about the bitcoin utlity... not traditional meaning
hint below:

Quote from: achow101 on January 29, 2018, 01:27:05 AM

Quote from: ArithmomanicVampire on January 28, 2018, 03:22:28 PM

I don't quite get yet how the k-of-n threshold scheme comes in (maybe it's out of the scope of that paper?), but in general, this is great news. I hope a BIP detailing the actual implementation into Bitcoin will be forthcoming soon.

k-of-n is out of scope for the paper. MuSig is only n-of-n, but with additional Bitcoin specific things, can be done in a k-of-n fashion.

oh look MUsig for bitcoin can be K-of-n
but anyway, on this bitcoin forum, i was thinking of bitcoins utilisation (which WE BOTH noted k-of-n is possible) and which insuch scenario the poker players wont know about the backroom guys if non interactive
(sorry i summarised it in the context of a ELI-5 bitcoin utility pitfall... shame on me for worrying about bitcoin pitfalls)

but to ELI-5 traditional.. instead of ELI-5 bitcoin
non interact = not asking to see the backroom before playing poker
interactive= asking to see the backroom so the 2 backroom guys cannot hide

ELI-5 bitcoin: easy to be a fund manager scammer if non interactive.. (as many devs/fund manager propose to have it k-of-n for bitcoin)

(maybe i should avoid dumbing down to ELI-5 and instead do ELI-21 step-by-step as a multipage detailed explanation to avoid the laughable knitpick..... rather than the summation and simplification based on what devs and 'fund managers' are hoping will be in bitcoin)

emphasis: i read the paper. then thought about bitcoin. i did not limit my summary to the 'traditional meaning' but the bitcoin possibility
so dont limit your rebuttles to the 'traditional meaning'(that skirting of the issue doesnt fly with me) but to the realistic pitfalls of possibilities of a bitcoin version
afterall this is a bitcoin forum

in short
non-interactive
k-of-n: backroom fund manager scammer risk
n-of-n: whole fund locked risk if one party offline/loses key/PC crashes