Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

R4R: EdDSA with Schnorr support using the secp256k1 curve (Taproot support) #22

Open
wants to merge 33 commits into
base: master
Choose a base branch
from

Conversation

gcsfred2
Copy link
Contributor

EdDSA with Schnorr support using the secp256k1 curve.

Gustavo Frederico added 11 commits December 21, 2021 13:19
… an odd Y coordinate, add aG to it so as to ensure R with even Y coordinate. Even though BIP 340 states that only R.X is used, the R recalculation in btcd/btcec/v2 's Signature.schnorrVerify checks if R = s*G - e*P. Without adding aG to R, it could have an odd Y coordinate and fail verification. This commit also fixed a previous serialization problem with s.
@gcsfred2 gcsfred2 changed the title EdDSA with Schnorr support using the secp256k1 curve (Taproot support) R4R: EdDSA with Schnorr support using the secp256k1 curve (Taproot support) Jan 26, 2022
@creamwhip creamwhip force-pushed the feature/taproot_eddsa_S256_ii branch 2 times, most recently from 2615fe9 to ff5c275 Compare January 28, 2022 07:05
@creamwhip creamwhip force-pushed the feature/taproot_eddsa_S256_ii branch from ff5c275 to 7fbb47a Compare January 28, 2022 07:10
@creamwhip creamwhip force-pushed the feature/taproot_eddsa_S256_ii branch from 7d6bae8 to 68d2ee8 Compare January 29, 2022 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants