49 Commits

Author	SHA1	Message	Date
Pieter Wuille	0c6a9cffad	Settle on notation: is_square(y), has_square_y(P)	2019-11-04 13:42:24 -08:00
Tim Ruffing	73b8e3aeeb	typos	2019-10-30 01:27:26 +01:00
Pieter Wuille	da4721cdc6	Update bip-schnorr.mediawiki ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2019-10-25 10:18:29 -07:00
Pieter Wuille	322ce53625	Update bip-schnorr.mediawiki ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2019-10-25 10:18:17 -07:00
Pieter Wuille	f95ac70606	Elaborate on default and alternative signing	2019-10-24 16:03:33 -07:00
Tim Ruffing	0176ed1871	Change reference for ECDSA proofs ... Refer to Manuel Fersch's dissertation for provable security of ECDSA. It's freely accessible and multiple results put well in context.	2019-10-21 13:27:59 +02:00
Pieter Wuille	ae32d243cd	Merge pull request #93 from sipa/201910_clarify_keygen ... Clarify interaction x-only keys with verification	2019-10-15 18:05:59 -07:00
Pieter Wuille	2a9a70c92a	More on key generation	2019-10-15 18:03:31 -07:00
Pieter Wuille	0a45ecbf04	Clarify interaction x-only keys with verification	2019-10-15 17:38:10 -07:00
Pieter Wuille	d434c18af8	Update bip-schnorr.mediawiki ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2019-10-15 17:33:33 -07:00
Pieter Wuille	59ac6a9683	Explain that MuSig needs key prefixing	2019-10-15 17:31:15 -07:00
Tim Ruffing	2d9877e6e1	bip-schnorr: more on (e,s)	2019-10-15 17:26:45 -07:00
Tim Ruffing	e139975eff	bip-schnorr: more on provable security ... I'll try to get a link to the CCS paper that does not have a paywall...	2019-10-15 16:02:09 -07:00
Pieter Wuille	348110ec52	Typo	2019-10-15 12:29:52 -07:00
Pieter Wuille	cdf7dd8cca	Drop other curve comment	2019-10-15 12:26:21 -07:00
Pieter Wuille	8c0b29cc94	Prefix infinite with is_	2019-10-15 12:24:21 -07:00
Pieter Wuille	1e00d6ef6a	Apply suggestions from code review ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2019-10-15 12:22:31 -07:00
Pieter Wuille	1442d4dabc	Formulate claims about BatchVerify more accurately	2019-10-15 12:11:17 -07:00
Pieter Wuille	0655cc3c64	Use is_square/is_positive and introduce algorithm names	2019-10-15 10:36:51 -07:00
Pieter Wuille	3c7fd7a830	HTTPS links where possible	2019-10-15 09:30:06 -07:00
Pieter Wuille	69f1c93d92	Small fixes from review with real-or-random	2019-10-14 17:55:19 -07:00
Pieter Wuille	90d9e21825	Merge pull request #82 from real-or-random/patch-8 ... Link to Schnorr's paper instead of Wikipedia	2019-10-07 10:44:10 -07:00
Tim Ruffing	3f61b2b1e7	Link to Schnorr's paper instead of Wikipedia	2019-10-03 11:21:24 +02:00
Jonas Nick	5c52872fe0	Standardize on secret key in bip-schnorr	2019-09-27 15:36:51 +00:00
Elichai Turkel	aa463b8193	Euler's Criterion prime only nit	2019-09-23 02:06:14 +03:00
Pieter Wuille	463a55935b	Merge pull request #67 from sipa/jonasnick_small-fixes ... Mention SHA256 block size (rebase of #45)	2019-09-11 17:44:08 -07:00
Jonas Nick	87fa069b8f	Mention SHA256 block size ... Rebased by Pieter Wuille	2019-09-11 17:43:11 -07:00
Pieter Wuille	fa423aced9	Address some nits	2019-09-10 16:24:07 -07:00
Pieter Wuille	10073d1ca5	Merge pull request #65 from real-or-random/patch-6 ... Rework Applications section	2019-09-10 16:21:51 -07:00
Tim Ruffing	4a383064fb	Add a footnote about 32-byte security	2019-09-08 16:38:55 +02:00
Tim Ruffing	6d99e45126	Rework Applications section	2019-09-08 16:38:15 +02:00
Anthony Towns	30bc716add	note about pubkey collision	2019-08-29 02:35:00 +10:00
Anthony Towns	fc74ec6b35	key gen, verify, sign in intro	2019-08-29 02:35:00 +10:00
Anthony Towns	4643538d4f	make secret key a 32-byte array called sk, introduce pubkey()	2019-08-29 02:35:00 +10:00
Anthony Towns	01e1f6e6b2	pk not p	2019-08-29 02:34:59 +10:00
Anthony Towns	e9600e6ed8	public keys aren't identical	2019-08-29 02:34:36 +10:00
Jonas Nick	dc6b91c1a9	Address sipa's comments	2019-08-27 15:13:08 +00:00
Jonas Nick	775cb2fd90	Tag signature hashes, improve rationale and update test vectors	2019-08-26 20:46:08 +00:00
Jonas Nick	7cd53f6eec	Use a tagged hash in bip-schnorr nonce derivation	2019-08-26 11:32:04 +00:00
Pieter Wuille	abe79d81e3	Merge pull request #58 from sipa/201908_computec ... Clarify pseudocode of lift_x	2019-08-21 16:24:39 -07:00
John Newbery	8492968f34	Replace 'quadratic residue of...'	2019-08-21 18:40:40 -04:00
John Newbery	a462876b9a	Return a point from lift_x()	2019-08-21 14:35:23 -07:00
John Newbery	ad91099b8f	Define c in lift_x(x)	2019-08-21 14:22:57 -07:00
Jonas Nick	0d28b3c37b	Address sipa's feedback	2019-08-21 11:42:03 +00:00
Jonas Nick	30fdc87599	Update bip-schnorr.mediawiki ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2019-08-20 10:53:51 +00:00
Jonas Nick	112d9c150a	Address Tim's comments	2019-08-19 14:37:55 +00:00
Jonas Nick	ed01c1a776	Switch to 32 byte public keys in bip-schnorr	2019-08-18 15:04:03 +00:00
Mark B Lundeberg	d194620af9	remove duplicate warning ... Though perhaps, the emphasis is warranted given its importance. :-)	2019-05-06 13:13:20 -07:00
Pieter Wuille	aeffa07527	Add draft for Schnorr BIP ... Includes squashed contributions by GitHub users jonasnick, real-or-random, AustinWilliams, JustinTArthur, ysangkok, RCassatta, Sjors, tnakagawa, and guggero.	2019-05-06 10:40:58 -07:00