3012 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Tim Ruffing	09e3f637b5	Change reference for ECDSA proofs ... Refer to Manuel Fersch's dissertation for provable security of ECDSA. It's freely accessible and multiple results put well in context.	2020-01-19 14:47:33 -08:00
Anthony Towns	feffc4e34d	annex is bit 0 of spend_type	2020-01-19 14:47:33 -08:00
Pieter Wuille	23c1c3ed8b	More on key generation	2020-01-19 14:47:33 -08:00
Pieter Wuille	7a7ab111c9	Clarify interaction x-only keys with verification	2020-01-19 14:47:33 -08:00
Pieter Wuille	20f9901809	Update bip-schnorr.mediawiki ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2020-01-19 14:47:33 -08:00
Pieter Wuille	aef148ffc6	Explain that MuSig needs key prefixing	2020-01-19 14:47:33 -08:00
Tim Ruffing	a7ee6c30fa	bip-schnorr: more on (e,s)	2020-01-19 14:47:33 -08:00
Tim Ruffing	bc4e8f28b8	bip-schnorr: more on provable security ... I'll try to get a link to the CCS paper that does not have a paywall...	2020-01-19 14:47:33 -08:00
Pieter Wuille	565ac4f717	Typo	2020-01-19 14:47:33 -08:00
Pieter Wuille	96a199ac8c	Drop other curve comment	2020-01-19 14:47:33 -08:00
Pieter Wuille	281df660b9	Prefix infinite with is_	2020-01-19 14:47:33 -08:00
Pieter Wuille	e29d82dc88	Apply suggestions from code review ... Co-Authored-By: Tim Ruffing <tim@timruffing.de>	2020-01-19 14:47:33 -08:00
Pieter Wuille	0d4191bae5	Formulate claims about BatchVerify more accurately	2020-01-19 14:47:33 -08:00
Pieter Wuille	7f5926703a	Use is_square/is_positive and introduce algorithm names	2020-01-19 14:47:33 -08:00
Pieter Wuille	9b9fab9a03	HTTPS links where possible	2020-01-19 14:47:33 -08:00
Pieter Wuille	406bc17c16	Small fixes from review with real-or-random	2020-01-19 14:47:33 -08:00
Pieter Wuille	276d9d338b	Small fix: 0xc1 is possible as first control block byte	2020-01-19 14:47:33 -08:00
Pieter Wuille	c93e298518	Increase max Merkle path length	2020-01-19 14:47:33 -08:00
Pieter Wuille	fb486d7e13	Fix formula	2020-01-19 14:47:33 -08:00
Pieter Wuille	79f9fc4cc8	Extend input_index from 16 to 32 bits	2020-01-19 14:47:33 -08:00
Pieter Wuille	d9a30c954f	Extend codeseparator_position from 16 to 32 bits	2020-01-19 14:47:33 -08:00
Jonas Nick	78bb31c3bf	Accept seckey in the form of bytes and not int in the reference BIP-schnorr code to match the spec.	2020-01-19 14:47:33 -08:00
Tim Ruffing	e0e422a5ca	Link to Schnorr's paper instead of Wikipedia	2020-01-19 14:47:33 -08:00
Jonas Nick	d112f5b035	Replace taproot_tweak_pubkey assertion with exception and add it to taproot_tweak_seckey too	2020-01-19 14:47:33 -08:00
Jonas Nick	afa5519ade	Add taproot_tweak_pubkey and taproot_tweak_privkey functions to bip-taproot wallet section	2020-01-19 14:47:33 -08:00
Jonas Nick	e1d7da3796	Add is_quad function to bip-schnorr reference code	2020-01-19 14:47:33 -08:00
Jonas Nick	fe8f5f68ca	Standardize on secret key in bip-schnorr	2020-01-19 14:47:33 -08:00
Jonas Nick	05cc92b9ad	Add x() and y() functions for points to bip-schnorr	2020-01-19 14:47:33 -08:00
Jonas Nick	1c8bdd75a5	Remove 0xc1	2020-01-19 14:47:33 -08:00
Anthony Towns	cf8233d39e	separate p2sh wrapped security rationale	2020-01-19 14:47:33 -08:00
Anthony Towns	7c6ee49c03	typo	2020-01-19 14:47:33 -08:00
Pieter Wuille	2202615b7c	Fixups	2020-01-19 14:47:33 -08:00
Pieter Wuille	4087834c73	Move/reword tagged hashes motivation	2020-01-19 14:47:33 -08:00
Pieter Wuille	499106c57b	Rework resource limits section	2020-01-19 14:47:33 -08:00
Pieter Wuille	972136beb6	Remove P2SH support	2020-01-19 14:47:33 -08:00
Elichai Turkel	8ea6798a9d	Euler's Criterion prime only nit	2020-01-19 14:47:33 -08:00
JamesC	f5c728ff82	Removed reference to 0xc1 leaf version. ... No longer necessary with 32B pubkeys.	2020-01-19 14:47:33 -08:00
Bryan Bishop	b78b6de4fd	bip-taproot: fix small typo (is does not)	2020-01-19 14:47:33 -08:00
Jonas Nick	65a4f1deb8	Mention SHA256 block size ... Rebased by Pieter Wuille	2020-01-19 14:47:33 -08:00
Pieter Wuille	8886eb4071	Address some nits	2020-01-19 14:47:33 -08:00
Jonas Nick	a5112f9f01	Move plain public key in output rationale to design section ... Rebased by Pieter Wuille	2020-01-19 14:47:33 -08:00
Tim Ruffing	2b987b5711	Rework Applications section	2020-01-19 14:47:33 -08:00
Jonas Nick	204b7f13a0	Prescribe that a taproot output key should always have a taproot commitment	2020-01-19 14:47:33 -08:00
Tim Ruffing	29037bd123	Add a footnote about 32-byte security	2020-01-19 14:47:33 -08:00
Anthony Towns	4491902569	note about pubkey collision	2020-01-19 14:47:33 -08:00
Anthony Towns	0d04e41e2f	key gen, verify, sign in intro	2020-01-19 14:47:33 -08:00
Anthony Towns	8ffea86023	use p for taproot internal key	2020-01-19 14:47:33 -08:00
Anthony Towns	4e13ec7301	make secret key a 32-byte array called sk, introduce pubkey()	2020-01-19 14:47:33 -08:00
Anthony Towns	a3f74a204e	pk not p	2020-01-19 14:47:33 -08:00
Anthony Towns	efa556aa06	public keys aren't identical	2020-01-19 14:47:33 -08:00