Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

R4R: EdDSA with Schnorr support using the secp256k1 curve (Taproot support) #22

Open
wants to merge 33 commits into
base: master
Choose a base branch
from

Conversation

gcsfred2
Copy link
Contributor

EdDSA with Schnorr support using the secp256k1 curve.

Gustavo Frederico added 11 commits December 21, 2021 13:19
… an odd Y coordinate, add aG to it so as to ensure R with even Y coordinate. Even though BIP 340 states that only R.X is used, the R recalculation in btcd/btcec/v2 's Signature.schnorrVerify checks if R = s*G - e*P. Without adding aG to R, it could have an odd Y coordinate and fail verification. This commit also fixed a previous serialization problem with s.
@gcsfred2 gcsfred2 requested a review from notatestuser January 26, 2022 12:35
@gcsfred2 gcsfred2 changed the title EdDSA with Schnorr support using the secp256k1 curve (Taproot support) R4R: EdDSA with Schnorr support using the secp256k1 curve (Taproot support) Jan 26, 2022
@creamwhip creamwhip force-pushed the feature/taproot_eddsa_S256_ii branch 2 times, most recently from 2615fe9 to ff5c275 Compare January 28, 2022 07:05
@creamwhip creamwhip force-pushed the feature/taproot_eddsa_S256_ii branch from ff5c275 to 7fbb47a Compare January 28, 2022 07:10
@creamwhip creamwhip force-pushed the feature/taproot_eddsa_S256_ii branch from 7d6bae8 to 68d2ee8 Compare January 29, 2022 12:14
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants