summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-01-23Merge commit 'origin-pull/876/head^^^^^^' into HEADLuke Dashjr
2020-01-23Merge branch 'master' into HEADLuke Dashjr
2020-01-19Address jonas' commentsPieter Wuille
2020-01-19Abstract out common signature message calculationPieter Wuille
2020-01-19Update acknowledgements, remove authorsPieter Wuille
2020-01-19Delete precompiled filePieter Wuille
2020-01-19go back to leaf_version but different rationaleAnthony Towns
2020-01-19Redefine leaf versions to be incrementally increasing from 0Pieter Wuille
2020-01-19Clarify nonce generationTim Ruffing
- Separate nonce generation into getting a random byte string and converting it to a suitable scalar ... - ... to make clear that the byte string can be generated differently. - Make the warning a little bit more prominent and improve writing
2020-01-19Update Post-History field for taproot/tapscriptPieter Wuille
2020-01-19Update authorsPieter Wuille
2020-01-19more precise wording on limitsstefanwouldgo
there are no tx or block size limits (post-Segwit), just block weight limit better wording
2020-01-19Add rationale on security assumptionsPieter Wuille
2020-01-19Add an informal summary of the designPieter Wuille
2020-01-19Improve and restructure motivation and designPieter Wuille
2020-01-19bip-taproot: example from diagramMatthew Zipkin
2020-01-19Update bip-schnorr.mediawikiPieter Wuille
Co-Authored-By: Tim Ruffing <crypto@timruffing.de>
2020-01-19Linearity makes sign-for-sum-of-keys easier, not possible entirely.Pieter Wuille
I'm sure it's possible to construct a complex MPC that can sign for the sum of keys under ECDSA as well.
2020-01-19Update bip-schnorr.mediawikiTim Ruffing
2020-01-19Mention that we don't change the hash functionTim Ruffing
2020-01-19Completely specifiedPieter Wuille
2020-01-19Low-S ECDSA is non-malleable under nonstandard assumptionsPieter Wuille
2020-01-19Replace private key with secret keyJonas Nick
2020-01-19Clarify why we don't want short hashesTim Ruffing
This is supposed to supersede https://github.com/sipa/bips/pull/158. I tried to say this carefully. I don't think that multiparty signing is in general broken with short hashes. For example the attack in #158 could be avoided by letting everybody not only commit to the nonce but also to the message. It's just that using a collision-resistant hash just eliminates the problem entirely...
2020-01-19Fix reference formattingHennadii Stepanov
2020-01-19Typo: script signature max bytes unhashed are 247Orfeas Stefanos Thyfronitis Litos
2020-01-19Typo: max bytes hashed for sig is 210Orfeas Stefanos Thyfronitis Litos
2020-01-19Replace BIP66 link with BIP146Orfeas Stefanos Thyfronitis Litos
BIP66 does not mention the inherent ECDSA malleability, but BIP146 does
2020-01-19fix singular/plural ambiguitystefanwouldgo
2020-01-19Replace signing with signature before validationOrfeas Stefanos Thyfronitis Litos
2020-01-19Link to proof sketch of security of implicit YOrfeas Stefanos Thyfronitis Litos
Thanks to @ajtowns for providing the link
2020-01-19Mention that miners could malleate signaturesOrfeas Stefanos Thyfronitis Litos
2020-01-19Mention hash_type malleability would change wtxidOrfeas Litos
2020-01-19Clarify bip-taproot digest difference to bip143 regarding sub-hashesJonas Nick
2020-01-19Improve clarity of footnotes for lift_xJonas Nick
2020-01-19Replace references to Euler's criterion with Legendre symbol in bip-schnorrJonas Nick
2020-01-19Fix bip-schnorr footnote 7 by specifying that we're referring to P's y ↵Jonas Nick
coordinate and not some undefined 'x'
2020-01-19Fix @jonasnick's commentKalle Rosenbaum
2020-01-19NitsKalle Rosenbaum
2020-01-19Replace "both are not" with "neither is"Orfeas Litos
2020-01-19Update bip-tapscript.mediawikiandrewtoth
2020-01-19Add missing closing parenthesis and commaandrewtoth
2020-01-19Fix paragraph naming and typoHennadii Stepanov
2020-01-19Rephrase "previous design choice" to "list above"Orfeas Stefanos Thyfronitis Litos
2020-01-19grammar typo fix: inserted "be"stefanwouldgo
2020-01-19Rename is_y_square to is_negated in taproot signingJonas Nick
2020-01-19Add missing dots that denote multiplicationDmitry Petukhov
Throughout the document, elliptic curve multiplication is denoted with dots, as in `d'⋅G` as opposed to `d'G`. This is not the case in one place in the 'Default Signing' section, and one place in 'Adaptor Signatures' section Missing dots are added for consistency.
2020-01-19Add missing quoteOrfeas Stefanos Thyfronitis Litos
2020-01-19Fix typo in schnorr, footnote 2Orfeas Stefanos Thyfronitis Litos
2020-01-19make clear it's script branchMax Hillebrand
In this context we are talking about the script branch, not the Merkle tree branch, right? If so, then this should clear things up a little.
generated by cgit v1.2.3 (git 2.26.2) at 2024-11-10 01:44:59 +0000