An aggregate signature lets multiple signers each sign a different message, then combine everything into one compact signature that proves who signed what.
@real_or_random explains the primitive behind Cross-Input Signature Aggregation.
Full talk at Eurocrypt below. ⬇️