 Tim Ruffing
|
09e3f637b5
|
Change reference for ECDSA proofs
Refer to Manuel Fersch's dissertation for provable security of ECDSA. It's freely accessible and multiple results put well in context.
|
2020-01-19 14:47:33 -08:00 |
|
 Anthony Towns
|
feffc4e34d
|
annex is bit 0 of spend_type
|
2020-01-19 14:47:33 -08:00 |
|
 Pieter Wuille
|
23c1c3ed8b
|
More on key generation
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
7a7ab111c9
|
Clarify interaction x-only keys with verification
|
2020-01-19 14:47:33 -08:00 |
|
 Pieter WuilleandTim Ruffing
|
20f9901809
|
Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
aef148ffc6
|
Explain that MuSig needs key prefixing
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
a7ee6c30fa
|
bip-schnorr: more on (e,s)
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
bc4e8f28b8
|
bip-schnorr: more on provable security
I'll try to get a link to the CCS paper that does not have a paywall...
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
565ac4f717
|
Typo
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
96a199ac8c
|
Drop other curve comment
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
281df660b9
|
Prefix infinite with is_
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter WuilleandTim Ruffing
|
e29d82dc88
|
Apply suggestions from code review
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
0d4191bae5
|
Formulate claims about BatchVerify more accurately
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
7f5926703a
|
Use is_square/is_positive and introduce algorithm names
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
9b9fab9a03
|
HTTPS links where possible
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
406bc17c16
|
Small fixes from review with real-or-random
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
276d9d338b
|
Small fix: 0xc1 is possible as first control block byte
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
c93e298518
|
Increase max Merkle path length
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
fb486d7e13
|
Fix formula
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
79f9fc4cc8
|
Extend input_index from 16 to 32 bits
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
d9a30c954f
|
Extend codeseparator_position from 16 to 32 bits
|
2020-01-19 14:47:33 -08:00 |
|
 Jonas Nick
|
78bb31c3bf
|
Accept seckey in the form of bytes and not int in the reference BIP-schnorr code to match the spec.
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
e0e422a5ca
|
Link to Schnorr's paper instead of Wikipedia
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
d112f5b035
|
Replace taproot_tweak_pubkey assertion with exception and add it to taproot_tweak_seckey too
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
afa5519ade
|
Add taproot_tweak_pubkey and taproot_tweak_privkey functions to bip-taproot wallet section
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
e1d7da3796
|
Add is_quad function to bip-schnorr reference code
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
fe8f5f68ca
|
Standardize on secret key in bip-schnorr
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
05cc92b9ad
|
Add x() and y() functions for points to bip-schnorr
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
1c8bdd75a5
|
Remove 0xc1
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
cf8233d39e
|
separate p2sh wrapped security rationale
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
7c6ee49c03
|
typo
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
2202615b7c
|
Fixups
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
4087834c73
|
Move/reword tagged hashes motivation
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
499106c57b
|
Rework resource limits section
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
972136beb6
|
Remove P2SH support
|
2020-01-19 14:47:33 -08:00 |
|
 Elichai Turkel
|
8ea6798a9d
|
Euler's Criterion prime only nit
|
2020-01-19 14:47:33 -08:00 |
|
 JamesC
|
f5c728ff82
|
Removed reference to 0xc1 leaf version.
No longer necessary with 32B pubkeys.
|
2020-01-19 14:47:33 -08:00 |
|
 Bryan Bishop
|
b78b6de4fd
|
bip-taproot: fix small typo (is does not)
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
65a4f1deb8
|
Mention SHA256 block size
Rebased by Pieter Wuille
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
8886eb4071
|
Address some nits
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
a5112f9f01
|
Move plain public key in output rationale to design section
Rebased by Pieter Wuille
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
2b987b5711
|
Rework Applications section
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
204b7f13a0
|
Prescribe that a taproot output key should always have a taproot commitment
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
29037bd123
|
Add a footnote about 32-byte security
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
4491902569
|
note about pubkey collision
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
0d04e41e2f
|
key gen, verify, sign in intro
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
8ffea86023
|
use p for taproot internal key
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
4e13ec7301
|
make secret key a 32-byte array called sk, introduce pubkey()
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
a3f74a204e
|
pk not p
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
efa556aa06
|
public keys aren't identical
|
2020-01-19 14:47:33 -08:00 |
|