Schnorr signatures are smaller and more efficient than ECDSA signatures, and they enable key aggregation.

With Schnorr signatures, multi-party transactions can be made to look identical to single-signature transactions on-chain.