Signature scheme enabling key aggregation and smaller proofs, used in Bitcoin Taproot and multi‑sig constructions to improve privacy and efficiency.