Dmitry Petukhov
75b464ad76
Add missing dots that denote multiplication
...
Throughout the document, elliptic curve multiplication is denoted with dots,
as in `d'⋅G` as opposed to `d'G`.
This is not the case in one place in the 'Default Signing' section,
and one place in 'Adaptor Signatures' section
Missing dots are added for consistency.
2019-11-22 00:21:05 +05:00
Orfeas Stefanos Thyfronitis Litos
314e9fd904
Add missing quote
2019-11-18 17:00:39 +00:00
Orfeas Stefanos Thyfronitis Litos
cacb82fc6d
Fix typo in schnorr, footnote 2
2019-11-18 14:47:27 +00:00
Hennadii Stepanov
7e98e2fd84
G refers to secp256k1 base point rather generator
2019-11-11 20:09:55 +02:00
Pieter Wuille
857dd625b5
Merge pull request #114 from real-or-random/patch-11
...
improve rationale for key prefixing
2019-11-04 16:06:29 -08:00
Pieter Wuille
0c6a9cffad
Settle on notation: is_square(y), has_square_y(P)
2019-11-04 13:42:24 -08:00
Tim Ruffing
db1973ffba
improve rationale for key prefixing
2019-10-30 01:32:07 +01:00
Tim Ruffing
73b8e3aeeb
typos
2019-10-30 01:27:26 +01:00
Pieter Wuille
da4721cdc6
Update bip-schnorr.mediawiki
...
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
2019-10-25 10:18:29 -07:00
Pieter Wuille
322ce53625
Update bip-schnorr.mediawiki
...
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
2019-10-25 10:18:17 -07:00
Pieter Wuille
f95ac70606
Elaborate on default and alternative signing
2019-10-24 16:03:33 -07:00
Tim Ruffing
0176ed1871
Change reference for ECDSA proofs
...
Refer to Manuel Fersch's dissertation for provable security of ECDSA. It's freely accessible and multiple results put well in context.
2019-10-21 13:27:59 +02:00
Pieter Wuille
ae32d243cd
Merge pull request #93 from sipa/201910_clarify_keygen
...
Clarify interaction x-only keys with verification
2019-10-15 18:05:59 -07:00
Pieter Wuille
2a9a70c92a
More on key generation
2019-10-15 18:03:31 -07:00
Pieter Wuille
0a45ecbf04
Clarify interaction x-only keys with verification
2019-10-15 17:38:10 -07:00
Pieter Wuille
d434c18af8
Update bip-schnorr.mediawiki
...
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
2019-10-15 17:33:33 -07:00
Pieter Wuille
59ac6a9683
Explain that MuSig needs key prefixing
2019-10-15 17:31:15 -07:00
Tim Ruffing
2d9877e6e1
bip-schnorr: more on (e,s)
2019-10-15 17:26:45 -07:00
Tim Ruffing
e139975eff
bip-schnorr: more on provable security
...
I'll try to get a link to the CCS paper that does not have a paywall...
2019-10-15 16:02:09 -07:00
Pieter Wuille
348110ec52
Typo
2019-10-15 12:29:52 -07:00
Pieter Wuille
cdf7dd8cca
Drop other curve comment
2019-10-15 12:26:21 -07:00
Pieter Wuille
8c0b29cc94
Prefix infinite with is_
2019-10-15 12:24:21 -07:00
Pieter Wuille
1e00d6ef6a
Apply suggestions from code review
...
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
2019-10-15 12:22:31 -07:00
Pieter Wuille
1442d4dabc
Formulate claims about BatchVerify more accurately
2019-10-15 12:11:17 -07:00
Pieter Wuille
0655cc3c64
Use is_square/is_positive and introduce algorithm names
2019-10-15 10:36:51 -07:00
Pieter Wuille
3c7fd7a830
HTTPS links where possible
2019-10-15 09:30:06 -07:00
Pieter Wuille
69f1c93d92
Small fixes from review with real-or-random
2019-10-14 17:55:19 -07:00
Pieter Wuille
90d9e21825
Merge pull request #82 from real-or-random/patch-8
...
Link to Schnorr's paper instead of Wikipedia
2019-10-07 10:44:10 -07:00
Tim Ruffing
3f61b2b1e7
Link to Schnorr's paper instead of Wikipedia
2019-10-03 11:21:24 +02:00
Jonas Nick
5c52872fe0
Standardize on secret key in bip-schnorr
2019-09-27 15:36:51 +00:00
Elichai Turkel
aa463b8193
Euler's Criterion prime only nit
2019-09-23 02:06:14 +03:00
Pieter Wuille
463a55935b
Merge pull request #67 from sipa/jonasnick_small-fixes
...
Mention SHA256 block size (rebase of #45 )
2019-09-11 17:44:08 -07:00
Jonas Nick
87fa069b8f
Mention SHA256 block size
...
Rebased by Pieter Wuille
2019-09-11 17:43:11 -07:00
Pieter Wuille
fa423aced9
Address some nits
2019-09-10 16:24:07 -07:00
Pieter Wuille
10073d1ca5
Merge pull request #65 from real-or-random/patch-6
...
Rework Applications section
2019-09-10 16:21:51 -07:00
Tim Ruffing
4a383064fb
Add a footnote about 32-byte security
2019-09-08 16:38:55 +02:00
Tim Ruffing
6d99e45126
Rework Applications section
2019-09-08 16:38:15 +02:00
Anthony Towns
30bc716add
note about pubkey collision
2019-08-29 02:35:00 +10:00
Anthony Towns
fc74ec6b35
key gen, verify, sign in intro
2019-08-29 02:35:00 +10:00
Anthony Towns
4643538d4f
make secret key a 32-byte array called sk, introduce pubkey()
2019-08-29 02:35:00 +10:00
Anthony Towns
01e1f6e6b2
pk not p
2019-08-29 02:34:59 +10:00
Anthony Towns
e9600e6ed8
public keys aren't identical
2019-08-29 02:34:36 +10:00
Jonas Nick
dc6b91c1a9
Address sipa's comments
2019-08-27 15:13:08 +00:00
Jonas Nick
775cb2fd90
Tag signature hashes, improve rationale and update test vectors
2019-08-26 20:46:08 +00:00
Jonas Nick
7cd53f6eec
Use a tagged hash in bip-schnorr nonce derivation
2019-08-26 11:32:04 +00:00
Pieter Wuille
abe79d81e3
Merge pull request #58 from sipa/201908_computec
...
Clarify pseudocode of lift_x
2019-08-21 16:24:39 -07:00
John Newbery
8492968f34
Replace 'quadratic residue of...'
2019-08-21 18:40:40 -04:00
John Newbery
a462876b9a
Return a point from lift_x()
2019-08-21 14:35:23 -07:00
John Newbery
ad91099b8f
Define c in lift_x(x)
2019-08-21 14:22:57 -07:00
Jonas Nick
0d28b3c37b
Address sipa's feedback
2019-08-21 11:42:03 +00:00
