<p>As far as I know, there is not even a published specification for MuSig2. One is being worked on at <a href="https://github.com/jonasnick/bips/blob/musig2/bip-musig2.mediawiki" rel="nofollow noreferrer">https://github.com/jonasnick/bips/blob/musig2/bip-musig2.mediawiki</a>, but it is incomplete.</p>
<p>There are some test vectors <a href="https://github.com/ElementsProject/secp256k1-zkp/blob/master/src/modules/musig/tests_impl.h" rel="nofollow noreferrer">here</a>.</p>

CC BY-SA 4.0
2021-11-17T12:45:47.920Z
2022-07-21T10:35:41.523Z
2022-07-21T10:35:41.523Z
Pieter Wuille
<p>I am writing a MuSig2 library and need some test vectors. This should include the hash functions used.</p>

CC BY-SA 4.0
2021-11-17T11:34:14.133Z
I'll leave to a MuSig(2) expert to answer the question but I don't think these exist yet. The MuSig(2) authors haven't included it in a secp256k1 release and it has been described as "super-experimental" https://github.com/bitcoin-core/secp256k1/issues/997. Some people are using it on mainnet though https://twitter.com/MuunWallet/status/1459769042072440833?s=20
Michael Folkson
CC BY-SA 4.0
2021-11-17T20:38:28.293Z
At the moment, your best bet is the the MuSig2 PR to secp256k1-zkp: https://github.com/ElementsProject/secp256k1-zkp/pull/131. It doesn't update the musig-spec.mediawiki yet and is only code so far. Still happy to hear your feedback there on the API design etc.
real-or-random
CC BY-SA 4.0
2021-11-19T10:52:06.600Z
@MichaelFolkson In the linked secp256k1 issue #997, I didn't mean to say that it's super-experimental. I really meant the opposite and "Is musig2 "super-experimental" [...]?" was a rhetorical question: I assume that the other contributors don't think it's super-experimental. I personally feel very confident in the scheme. It has a security proof, and the core ideas have been verified by others independently (e.g., FROST)
The only thing that I think is experimental is the implementation, which is currently PR'd to secp256k1-zkp but maybe should be PR'd to secp256k1 as an experimental module.
real-or-random
CC BY-SA 4.0
2021-11-19T13:30:33.727Z
@real-or-random: Thanks for clarifying!
Michael Folkson
<multi-signature><taproot><schnorr-signatures><musig>
Where can I get some MuSig2 test vectors?
Jimmy Song
# Where can I get some MuSig2 test vectors?

(Asked by: username_0 on 2021-11-17)

I am writing a MuSig2 library and need some test vectors. This should include the hash functions used.

**Tags:** multi-signature, taproot, schnorr-signatures, musig

> **Comments:**
> **username_1**: I'll leave to a MuSig(2) expert to answer the question but I don't think these exist yet. The MuSig(2) authors haven't included it in a secp256k1 release and it has been described as "super-experimental" https://github.com/bitcoin-core/secp256k1/issues/997. Some people are using it on mainnet though https://twitter.com/MuunWallet/status/1459769042072440833?s=20  
> **username_2**: At the moment, your best bet is the the MuSig2 PR to secp256k1-zkp: https://github.com/ElementsProject/secp256k1-zkp/pull/131. It doesn't update the musig-spec.mediawiki yet and is only code so far. Still happy to hear your feedback there on the API design etc.  
> **username_2**: @username_1 In the linked secp256k1 issue #997, I didn't mean to say that it's super-experimental. I really meant the opposite and "Is musig2 "super-experimental" [...]?" was a rhetorical question: I assume that the other contributors don't think it's super-experimental. I personally feel very confident in the scheme. It has a security proof, and the core ideas have been verified by others independently (e.g., FROST) The only thing that I think is experimental is the implementation, which is currently PR'd to secp256k1-zkp but maybe should be PR'd to secp256k1 as an experimental module.  
> **username_1**: @username_2: Thanks for clarifying!  

---

## 1 answers

### Answer by username_3 on 2021-11-17. Score: 6 | Accepted answer

As far as I know, there is not even a published specification for MuSig2. One is being worked on at <https://github.com/jonasnick/bips/blob/musig2/bip-musig2.mediawiki>, but it is incomplete.

There are some test vectors [here](https://github.com/ElementsProject/secp256k1-zkp/blob/master/src/modules/musig/tests_impl.h).


---

