 Tim Ruffing
|
9b5ba158c1
|
improve rationale for key prefixing
|
2020-01-19 14:47:33 -08:00 |
|
 Pieter Wuille
|
ae7122822a
|
Settle on notation: is_square(y), has_square_y(P)
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
7c00346cf2
|
typos
|
2020-01-19 14:47:33 -08:00 |
|
 Pieter WuilleandTim Ruffing
|
9c1670f345
|
Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter WuilleandTim Ruffing
|
83cebb5326
|
Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
1695f073d3
|
Elaborate on default and alternative signing
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
09e3f637b5
|
Change reference for ECDSA proofs
Refer to Manuel Fersch's dissertation for provable security of ECDSA. It's freely accessible and multiple results put well in context.
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
23c1c3ed8b
|
More on key generation
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
7a7ab111c9
|
Clarify interaction x-only keys with verification
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter WuilleandTim Ruffing
|
20f9901809
|
Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
aef148ffc6
|
Explain that MuSig needs key prefixing
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
a7ee6c30fa
|
bip-schnorr: more on (e,s)
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
bc4e8f28b8
|
bip-schnorr: more on provable security
I'll try to get a link to the CCS paper that does not have a paywall...
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
565ac4f717
|
Typo
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
96a199ac8c
|
Drop other curve comment
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
281df660b9
|
Prefix infinite with is_
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter WuilleandTim Ruffing
|
e29d82dc88
|
Apply suggestions from code review
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
0d4191bae5
|
Formulate claims about BatchVerify more accurately
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
7f5926703a
|
Use is_square/is_positive and introduce algorithm names
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
9b9fab9a03
|
HTTPS links where possible
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
406bc17c16
|
Small fixes from review with real-or-random
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
e0e422a5ca
|
Link to Schnorr's paper instead of Wikipedia
|
2020-01-19 14:47:33 -08:00 |
|
 Jonas Nick
|
fe8f5f68ca
|
Standardize on secret key in bip-schnorr
|
2020-01-19 14:47:33 -08:00 |
|
 Elichai Turkel
|
8ea6798a9d
|
Euler's Criterion prime only nit
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
65a4f1deb8
|
Mention SHA256 block size
Rebased by Pieter Wuille
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
8886eb4071
|
Address some nits
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
2b987b5711
|
Rework Applications section
|
2020-01-19 14:47:33 -08:00 |
|
|
Tim Ruffing
|
29037bd123
|
Add a footnote about 32-byte security
|
2020-01-19 14:47:33 -08:00 |
|
 Anthony Towns
|
4491902569
|
note about pubkey collision
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
0d04e41e2f
|
key gen, verify, sign in intro
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
4e13ec7301
|
make secret key a 32-byte array called sk, introduce pubkey()
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
a3f74a204e
|
pk not p
|
2020-01-19 14:47:33 -08:00 |
|
|
Anthony Towns
|
efa556aa06
|
public keys aren't identical
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
cc962bf84f
|
Address sipa's comments
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
c33c7d0a0c
|
Tag signature hashes, improve rationale and update test vectors
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
7f3611d239
|
Use a tagged hash in bip-schnorr nonce derivation
|
2020-01-19 14:47:33 -08:00 |
|
 John Newbery
|
680af7db4c
|
Return a point from lift_x()
|
2020-01-19 14:47:33 -08:00 |
|
|
John Newbery
|
bba0bad5e8
|
Define c in lift_x(x)
|
2020-01-19 14:47:33 -08:00 |
|
|
John Newbery
|
1c6b104597
|
Replace 'quadratic residue of...'
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
f3bef4f459
|
Address sipa's feedback
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas NickandTim Ruffing
|
5da30bd568
|
Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
303ff5fb26
|
Address Tim's comments
|
2020-01-19 14:47:33 -08:00 |
|
|
Jonas Nick
|
e084aafb8b
|
Switch to 32 byte public keys in bip-schnorr
|
2020-01-19 14:47:33 -08:00 |
|
 Mark B Lundeberg
|
b65cd69467
|
remove duplicate warning
Though perhaps, the emphasis is warranted given its importance. :-)
|
2020-01-19 14:47:33 -08:00 |
|
|
Pieter Wuille
|
6e77233b57
|
Add draft for Schnorr BIP
Includes squashed contributions by GitHub users jonasnick,
real-or-random, AustinWilliams, JustinTArthur, ysangkok,
RCassatta, Sjors, tnakagawa, and guggero.
|
2020-01-19 14:47:33 -08:00 |
|