summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPieter Wuille <pieter.wuille@gmail.com>2019-11-26 06:54:21 -0800
committerGitHub <noreply@github.com>2019-11-26 06:54:21 -0800
commit3d3bd7660c92f56ba31fa8f0dd0c4bbcfc223930 (patch)
tree379e4ce69f52f2b5b6a3eaae59095a41a15c4235
parent9648889b4febdb9c7b14c58feb31b165f69ea468 (diff)
parent8ca122e8febdc4918cebf3dcd0f2b7e2f7ec7d26 (diff)
Merge pull request #160 from OrfeasLitos/clarify-choices
Rephrase "previous design choice" to "list above"
-rw-r--r--bip-schnorr.mediawiki2
1 files changed, 1 insertions, 1 deletions
diff --git a/bip-schnorr.mediawiki b/bip-schnorr.mediawiki
index bd87974..c0769b0 100644
--- a/bip-schnorr.mediawiki
+++ b/bip-schnorr.mediawiki
@@ -77,7 +77,7 @@ Using the first option would be slightly more efficient for verification (around
In the case of ''R'' the third option is slower at signing time but a bit faster to verify, as it is possible to directly compute whether the Y coordinate is a square when the points are represented in
[https://en.wikibooks.org/wiki/Cryptography/Prime_Curve/Jacobian_Coordinates Jacobian coordinates] (a common optimization to avoid modular inverses
for elliptic curve operations). The two other options require a possibly
-expensive conversion to affine coordinates first. This would even be the case if the sign or oddness were explicitly coded (option 2 in the previous design choice). We therefore choose option 3.
+expensive conversion to affine coordinates first. This would even be the case if the sign or oddness were explicitly coded (option 2 in the list above). We therefore choose option 3.
For ''P'' the speed of signing and verification does not significantly differ between any of the three options because affine coordinates of the point have to be computed anyway. For consistency reasons we choose the same option as for ''R''. The signing algorithm ensures that the signature is valid under the correct public key by negating the secret key if necessary.