From 453947f43ab1d67df777ce6a26c8904a80afe20f Mon Sep 17 00:00:00 2001 From: Anthony Towns Date: Sat, 1 Feb 2020 16:53:02 +1000 Subject: [PATCH] give bip32 conversion its own section --- bip-0340.mediawiki | 2 ++ 1 file changed, 2 insertions(+) diff --git a/bip-0340.mediawiki b/bip-0340.mediawiki index 3aa6e053..bd04d698 100644 --- a/bip-0340.mediawiki +++ b/bip-0340.mediawiki @@ -142,6 +142,8 @@ The algorithm ''PubKey(sk)'' is defined as: Note that we use a very different public key format (32 bytes) than the ones used by existing systems (which typically use elliptic curve points as public keys, or 33-byte or 65-byte encodings of them). A side effect is that ''PubKey(sk) = PubKey(bytes(n - int(sk))'', so every public key has two corresponding secret keys. +==== Public Key Conversion ==== + As an alternative to generating keys randomly, it is also possible and safe to repurpose existing key generation algorithms for ECDSA in a compatible way. The secret keys constructed by such an algorithm can be used as ''sk'' directly. The public keys constructed by such an algorithm (assuming they use the 33-byte compressed encoding) need to be converted by dropping the first byte. Specifically, [[bip-0032.mediawiki|BIP32]] and schemes built on top of it remain usable. ==== Default Signing ====