diff --git a/ch08_signatures.adoc b/ch08_signatures.adoc
index 4c065e65..b25f04dc 100644
--- a/ch08_signatures.adoc
+++ b/ch08_signatures.adoc
@@ -548,7 +548,7 @@ she's ready to spend, she begins generating her signature:
 
 ==== Serialization of Schnorr Signatures
 
-A schnorr signature ((("digital signatures", "schnorr signature algorithm", "serialization")))((("schnorr signature algorithm", "serialization")))((("serialization", "of schnorr signature algorithm", secondary-sortas="schrnorr")))consists of two values, +kG+ and +s+.  The value
+A schnorr signature ((("digital signatures", "schnorr signature algorithm", "serialization")))((("schnorr signature algorithm", "serialization")))((("serialization", "of schnorr signature algorithm", secondary-sortas="schnorr")))consists of two values, +kG+ and +s+.  The value
 +kG+ is a point on Bitcoin's elliptic curve (called secp256k1) and so
 would normally be represented by two 32-byte coordinates, e.g., +(x,y)+.
 However, only the _x_ coordinate is needed, so only that value is
@@ -581,7 +581,7 @@ the serialization used for ECDSA signatures described in
 [[schnorr_multisignatures]]
 ==== Schnorr-based Scriptless Multisignatures
 
-In the single-signature schnorr protocol described in <<schnorr_signatures>>, Alice
+In the((("digital signatures", "schnorr signature algorithm", "scriptless multisignatures", id="digital-sigs-schnorr-multisig")))((("schnorr signature algorithm", "scriptless multisignatures", id="schnorr-multisig")))((("scriptless multisignatures", "in schnorr signature algorithm", secondary-sortas="schnorr", id="scriptless-multi-schnorr"))) single-signature schnorr protocol described in <<schnorr_signatures>>, Alice
 uses a signature (+kG+, +s+) to publicly prove her knowledge of her
 private key, which in this case we'll call +y+.  Imagine if Bob also has
 a private key (+z+) and he's willing to work with Alice to prove that