This lab needs JavaScript. Nothing here is precomputed — the keys, nonces, signatures and the BIP-327 test vectors are all generated and checked in your browser as you read, so with scripting disabled there is nothing to show. The source is on GitHub if you would rather read it than run it.

MuSig Gate

MuSig2 · BIP-327

Step through the real two-round MuSig2 protocol — n public keys collapsing into one, n nonce pairs into one nonce, n partial signatures into one — then watch a plain BIP-340 verifier accept the result, and try to break both the key and nonce aggregation yourself.