2151 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Pieter Wuille	9c1670f345	Update bip-schnorr.mediawiki ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2020-01-19 14:47:33 -08:00
Pieter Wuille	83cebb5326	Update bip-schnorr.mediawiki ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2020-01-19 14:47:33 -08:00
Pieter Wuille	1695f073d3	Elaborate on default and alternative signing	2020-01-19 14:47:33 -08:00
Pieter Wuille	fc0a4ef542	Explain why CMS is not turned into SUCCESSx	2020-01-19 14:47:33 -08:00
Pieter Wuille	2059b9e35a	Address aj comments	2020-01-19 14:47:33 -08:00
Pieter Wuille	3595c30acd	Improve section on alternatives to OP_CHECKMULTISIG	2020-01-19 14:47:33 -08:00
Tim Ruffing	09e3f637b5	Change reference for ECDSA proofs ... Refer to Manuel Fersch's dissertation for provable security of ECDSA. It's freely accessible and multiple results put well in context.	2020-01-19 14:47:33 -08:00
Anthony Towns	feffc4e34d	annex is bit 0 of spend_type	2020-01-19 14:47:33 -08:00
Pieter Wuille	23c1c3ed8b	More on key generation	2020-01-19 14:47:33 -08:00
Pieter Wuille	7a7ab111c9	Clarify interaction x-only keys with verification	2020-01-19 14:47:33 -08:00
Pieter Wuille	20f9901809	Update bip-schnorr.mediawiki ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2020-01-19 14:47:33 -08:00
Pieter Wuille	aef148ffc6	Explain that MuSig needs key prefixing	2020-01-19 14:47:33 -08:00
Tim Ruffing	a7ee6c30fa	bip-schnorr: more on (e,s)	2020-01-19 14:47:33 -08:00
Tim Ruffing	bc4e8f28b8	bip-schnorr: more on provable security ... I'll try to get a link to the CCS paper that does not have a paywall...	2020-01-19 14:47:33 -08:00
Pieter Wuille	565ac4f717	Typo	2020-01-19 14:47:33 -08:00
Pieter Wuille	96a199ac8c	Drop other curve comment	2020-01-19 14:47:33 -08:00
Pieter Wuille	281df660b9	Prefix infinite with is_	2020-01-19 14:47:33 -08:00
Pieter Wuille	e29d82dc88	Apply suggestions from code review ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2020-01-19 14:47:33 -08:00
Pieter Wuille	0d4191bae5	Formulate claims about BatchVerify more accurately	2020-01-19 14:47:33 -08:00
Pieter Wuille	7f5926703a	Use is_square/is_positive and introduce algorithm names	2020-01-19 14:47:33 -08:00
Pieter Wuille	9b9fab9a03	HTTPS links where possible	2020-01-19 14:47:33 -08:00
Pieter Wuille	406bc17c16	Small fixes from review with real-or-random	2020-01-19 14:47:33 -08:00
Pieter Wuille	276d9d338b	Small fix: 0xc1 is possible as first control block byte	2020-01-19 14:47:33 -08:00
Pieter Wuille	c93e298518	Increase max Merkle path length	2020-01-19 14:47:33 -08:00
Pieter Wuille	fb486d7e13	Fix formula	2020-01-19 14:47:33 -08:00
Pieter Wuille	79f9fc4cc8	Extend input_index from 16 to 32 bits	2020-01-19 14:47:33 -08:00
Pieter Wuille	d9a30c954f	Extend codeseparator_position from 16 to 32 bits	2020-01-19 14:47:33 -08:00
Jonas Nick	78bb31c3bf	Accept seckey in the form of bytes and not int in the reference BIP-schnorr code to match the spec.	2020-01-19 14:47:33 -08:00
Tim Ruffing	e0e422a5ca	Link to Schnorr's paper instead of Wikipedia	2020-01-19 14:47:33 -08:00
Jonas Nick	d112f5b035	Replace taproot_tweak_pubkey assertion with exception and add it to taproot_tweak_seckey too	2020-01-19 14:47:33 -08:00
Jonas Nick	afa5519ade	Add taproot_tweak_pubkey and taproot_tweak_privkey functions to bip-taproot wallet section	2020-01-19 14:47:33 -08:00
Jonas Nick	e1d7da3796	Add is_quad function to bip-schnorr reference code	2020-01-19 14:47:33 -08:00
Jonas Nick	fe8f5f68ca	Standardize on secret key in bip-schnorr	2020-01-19 14:47:33 -08:00
Jonas Nick	05cc92b9ad	Add x() and y() functions for points to bip-schnorr	2020-01-19 14:47:33 -08:00
Jonas Nick	1c8bdd75a5	Remove 0xc1	2020-01-19 14:47:33 -08:00
Anthony Towns	cf8233d39e	separate p2sh wrapped security rationale	2020-01-19 14:47:33 -08:00
Anthony Towns	7c6ee49c03	typo	2020-01-19 14:47:33 -08:00
Pieter Wuille	2202615b7c	Fixups	2020-01-19 14:47:33 -08:00
Pieter Wuille	4087834c73	Move/reword tagged hashes motivation	2020-01-19 14:47:33 -08:00
Pieter Wuille	499106c57b	Rework resource limits section	2020-01-19 14:47:33 -08:00
Pieter Wuille	972136beb6	Remove P2SH support	2020-01-19 14:47:33 -08:00
Elichai Turkel	8ea6798a9d	Euler's Criterion prime only nit	2020-01-19 14:47:33 -08:00
JamesC	f5c728ff82	Removed reference to 0xc1 leaf version. ... No longer necessary with 32B pubkeys.	2020-01-19 14:47:33 -08:00
Bryan Bishop	b78b6de4fd	bip-taproot: fix small typo (is does not)	2020-01-19 14:47:33 -08:00
Jonas Nick	65a4f1deb8	Mention SHA256 block size ... Rebased by Pieter Wuille	2020-01-19 14:47:33 -08:00
Pieter Wuille	8886eb4071	Address some nits	2020-01-19 14:47:33 -08:00
Jonas Nick	a5112f9f01	Move plain public key in output rationale to design section ... Rebased by Pieter Wuille	2020-01-19 14:47:33 -08:00
Tim Ruffing	2b987b5711	Rework Applications section	2020-01-19 14:47:33 -08:00
Jonas Nick	204b7f13a0	Prescribe that a taproot output key should always have a taproot commitment	2020-01-19 14:47:33 -08:00
Tim Ruffing	29037bd123	Add a footnote about 32-byte security	2020-01-19 14:47:33 -08:00