multi-party-schnorr

multi-party-schnorr copied to clipboard

https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki

doronz2

Second round is unnecessary

23

If, in the first round each party uses a proof of knowledge of secret key, the second round where signers verify the commitment - which is necessary to prevent a...

earonesty

Fix generating wrong e value when the message bytes start with "00" byte

13

This PR fixes issue #35 The sha256 hash function which is used in schnorr signature generation receives inputs as BigInt value. But the BigInt value eliminate head bytes if it...

rantan

Wrong local sig is generated, when the first byte of a hash input is 0.

10

Current LocalSig generation code in `src/protocols/thresholdsig/bitcoin_schnorr.rs` uses a hash function which get input values as BigInt. However, if the first bytes of input is 0, the BigInt omit the 0....

rantan

Schnorr Blind Signature support?

5

Is there any support or planned support of Schnorr Blind Signatures?

Kelbie

Compare to Schnorrkel

3

https://github.com/w3f/schnorrkel is based on ristretto curve and implements MuSig. multi-party-schnorr can also use Ristretto and MuSig is implemented. It will be interesting to compare both implementations. cc: @burdges

omershlo

thanks to the awesome Jonas Nick!

omershlo

Check validity of a partial signature?

9

Hello, I was reading the tests for aggregate signatures and I noticed there didn't seem to be any asserts to check the validity of partial signatures. Is this an easy...

robertsdotpm

omershlo

Following the same paradigm as in https://github.com/KZen-networks/curv/blob/master/src/cryptographic_primitives/twoparty/dh_key_exchange.rs

omershlo