Pieter Wuille
|
05a03f2d61
|
Merge pull request #209 from real-or-random/patch-17
BIP340: Fix typo
|
2020-08-04 10:05:35 -07:00 |
|
Pieter Wuille
|
e331aadf92
|
Merge pull request #206 from jonasnick/some-fixups
BIP-0340: Miscellaneous fixups
|
2020-07-21 19:38:23 -07:00 |
|
Pieter Wuille
|
1e2d05609f
|
Merge pull request #208 from sipa/202007_nobitloss
Clarify security argument of x-only pubkeys
|
2020-07-21 19:36:23 -07:00 |
|
Pieter Wuille
|
cf2937c811
|
Merge pull request #202 from ysangkok/bip-0340-typing
Typing annotations for BIP-0340
|
2020-04-10 13:44:55 -07:00 |
|
Pieter Wuille
|
1d999cf678
|
Merge pull request #203 from jonasnick/remove-is-negated
BIP-0341: Replace notion of is_negated with parity bit
|
2020-04-06 19:25:18 -07:00 |
|
Pieter Wuille
|
038615b7c7
|
Merge pull request #200 from real-or-random/prints
Add debug print for intermediate values
|
2020-04-02 16:34:24 -07:00 |
|
Pieter Wuille
|
9abbfa53c9
|
Merge pull request #199 from real-or-random/patch-16
Fix a few minor issues
|
2020-03-04 15:49:20 -08:00 |
|
Pieter Wuille
|
88d30c704f
|
Address comments
|
2020-02-23 19:45:10 -08:00 |
|
Pieter Wuille
|
806b46fde1
|
Switch to new synth nonce scheme and make it default
|
2020-02-23 19:43:20 -08:00 |
|
Pieter Wuille
|
d11cf65b6c
|
Change tags to prevent inconsistent breakage with earlier draft
|
2020-02-23 19:35:22 -08:00 |
|
Pieter Wuille
|
6581a87ff2
|
Switch to even-y tiebreaker for pubkeys
|
2020-02-23 19:33:35 -08:00 |
|
Pieter Wuille
|
9cf4038f17
|
fix BIP links
|
2020-01-20 07:35:26 -08:00 |
|
Pieter Wuille
|
9de7dfccfa
|
Add to README
|
2020-01-19 14:48:58 -08:00 |
|
Pieter Wuille
|
c3b91dcc22
|
Fixes to headers
|
2020-01-19 14:48:58 -08:00 |
|
Pieter Wuille
|
fa305e5abd
|
Make buildtable.pl support Requires: field
|
2020-01-19 14:48:58 -08:00 |
|
Pieter Wuille
|
e1914b8173
|
fixes
|
2020-01-19 14:48:58 -08:00 |
|
Pieter Wuille
|
eb641cbdb5
|
Address jonas' comments
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
1faa4b19bc
|
Rename BIPs
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
57ed6cb342
|
Abstract out common signature message calculation
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
d9ec5f43da
|
Update acknowledgements, remove authors
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
cd8ea88987
|
Delete precompiled file
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
ff8a36200b
|
Redefine leaf versions to be incrementally increasing from 0
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
92e3d6ca87
|
Update Post-History field for taproot/tapscript
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
f429750036
|
Update authors
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
460163ee0b
|
Add rationale on security assumptions
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
94e9c0925a
|
Add an informal summary of the design
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
84161e187d
|
Improve and restructure motivation and design
|
2020-01-19 14:47:33 -08:00 |
|
 Pieter WuilleandTim Ruffing
|
2c8feb1cbb
|
Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <crypto@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
9c76bb457f
|
Linearity makes sign-for-sum-of-keys easier, not possible entirely.
I'm sure it's possible to construct a complex MPC that can sign for the
sum of keys under ECDSA as well.
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
3c1f466372
|
Completely specified
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
687ec4ba8e
|
Low-S ECDSA is non-malleable under nonstandard assumptions
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
ae7122822a
|
Settle on notation: is_square(y), has_square_y(P)
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
dbbe690c8a
|
Consistently mention resource limits in bip-tapscript
|
2020-01-19 14:47:33 -08:00 |
|
 Pieter WuilleandTim Ruffing
|
9c1670f345
|
Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
 Pieter WuilleandTim Ruffing
|
83cebb5326
|
Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
1695f073d3
|
Elaborate on default and alternative signing
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
fc0a4ef542
|
Explain why CMS is not turned into SUCCESSx
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
2059b9e35a
|
Address aj comments
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
3595c30acd
|
Improve section on alternatives to OP_CHECKMULTISIG
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
23c1c3ed8b
|
More on key generation
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
7a7ab111c9
|
Clarify interaction x-only keys with verification
|
2020-01-19 14:47:33 -08:00 |
|
 Pieter WuilleandTim Ruffing
|
20f9901809
|
Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
aef148ffc6
|
Explain that MuSig needs key prefixing
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
565ac4f717
|
Typo
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
96a199ac8c
|
Drop other curve comment
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
281df660b9
|
Prefix infinite with is_
|
2020-01-19 14:47:33 -08:00 |
|
 Pieter WuilleandTim Ruffing
|
e29d82dc88
|
Apply suggestions from code review
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
0d4191bae5
|
Formulate claims about BatchVerify more accurately
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
7f5926703a
|
Use is_square/is_positive and introduce algorithm names
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
9b9fab9a03
|
HTTPS links where possible
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
406bc17c16
|
Small fixes from review with real-or-random
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
276d9d338b
|
Small fix: 0xc1 is possible as first control block byte
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
c93e298518
|
Increase max Merkle path length
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
fb486d7e13
|
Fix formula
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
79f9fc4cc8
|
Extend input_index from 16 to 32 bits
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
d9a30c954f
|
Extend codeseparator_position from 16 to 32 bits
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
2202615b7c
|
Fixups
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
4087834c73
|
Move/reword tagged hashes motivation
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
499106c57b
|
Rework resource limits section
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
972136beb6
|
Remove P2SH support
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
8886eb4071
|
Address some nits
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
c7d7034b16
|
Add taproot/tapscript bips drafts
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
6e77233b57
|
Add draft for Schnorr BIP
Includes squashed contributions by GitHub users jonasnick,
real-or-random, AustinWilliams, JustinTArthur, ysangkok,
RCassatta, Sjors, tnakagawa, and guggero.
|
2020-01-19 14:47:33 -08:00 |
|
Pieter Wuille
|
ffa91573d2
|
Merge pull request #186 from sipa/202001_commonsighash
Abstract out common signature message calculation
|
2020-01-16 13:04:36 -05:00 |
|
Pieter Wuille
|
0e3b6c595c
|
Address jonas' comments
|
2020-01-14 10:28:49 -08:00 |
|
Pieter Wuille
|
86eea8adb4
|
Merge pull request #187 from sipa/202001_acks
Update acknowledgements, remove authors
|
2020-01-14 10:01:09 -05:00 |
|
Pieter Wuille
|
7497bdeceb
|
Update acknowledgements, remove authors
|
2020-01-13 14:39:32 -08:00 |
|
Pieter Wuille
|
c0d2f93f3c
|
Abstract out common signature message calculation
|
2020-01-13 14:10:26 -08:00 |
|
Pieter Wuille
|
138c62c8b0
|
Delete precompiled file
|
2020-01-13 07:27:18 -08:00 |
|
Pieter Wuille
|
bdef41ab58
|
Merge pull request #185 from sipa/202001_shifted_leaf_v
Rewrite leaf versions rationale
|
2020-01-13 10:26:14 -05:00 |
|
Pieter Wuille
|
39a18f4b18
|
Redefine leaf versions to be incrementally increasing from 0
|
2020-01-08 07:39:30 -08:00 |
|
Pieter Wuille
|
6a36adea8d
|
Merge pull request #184 from real-or-random/patch-15
clarify nonce generation
|
2020-01-05 06:06:47 -05:00 |
|
Pieter Wuille
|
1d2166edc9
|
Merge pull request #183 from sipa/201912_authors
Update authors
|
2019-12-19 12:41:43 -05:00 |
|
Pieter Wuille
|
ded38826ce
|
Merge pull request #167 from stefanwouldgo/patch-4
more precise wording: limits on tx+block size -> block weight limit
|
2019-12-19 12:41:25 -05:00 |
|
Pieter Wuille
|
17b3f9e01a
|
Update Post-History field for taproot/tapscript
|
2019-12-17 17:27:36 -08:00 |
|
Pieter Wuille
|
b90b53cd17
|
Update authors
|
2019-12-17 17:27:22 -08:00 |
|
Pieter Wuille
|
cb187012b6
|
Merge pull request #181 from sipa/201912_reorder_motivation
Restructure motivation/design and add informal summary
|
2019-12-17 14:31:28 -05:00 |
|
Pieter Wuille
|
b979c47893
|
Merge pull request #182 from pinheadmz/example1
bip-taproot: Explain example from script-tree diagram
|
2019-12-17 14:30:56 -05:00 |
|
Pieter Wuille
|
882e46350d
|
Add rationale on security assumptions
|
2019-12-16 10:52:43 -08:00 |
|
Pieter Wuille
|
1c163188ee
|
Add an informal summary of the design
|
2019-12-15 22:37:22 -08:00 |
|
Pieter Wuille
|
01e5bfbf19
|
Improve and restructure motivation and design
|
2019-12-15 13:28:58 -08:00 |
|
Pieter Wuille
|
cb1cec770b
|
Merge pull request #176 from sipa/201912_linear_is_easy
Linearity makes sign-for-sum-of-keys easier, not possible entirely.
|
2019-12-14 16:25:11 -05:00 |
|
Pieter Wuille
|
7c7aead1c1
|
Merge pull request #179 from real-or-random/patch-14
Mention that we don't change the hash function
|
2019-12-14 16:24:52 -05:00 |
|
Pieter Wuille
|
6b50893798
|
Merge pull request #178 from sipa/201912_schnorr_consensus_exact
Consistent validity
|
2019-12-14 16:24:32 -05:00 |
|
 Pieter WuilleandTim Ruffing
|
83adab4af9
|
Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <crypto@timruffing.de>
|
2019-12-13 15:38:15 -08:00 |
|
Pieter Wuille
|
a8ebb65eb1
|
Linearity makes sign-for-sum-of-keys easier, not possible entirely.
I'm sure it's possible to construct a complex MPC that can sign for the
sum of keys under ECDSA as well.
|
2019-12-13 15:37:50 -08:00 |
|
Pieter Wuille
|
431ebd2f44
|
Merge pull request #177 from sipa/201912_lows_ecdsa_nonmalleable
Low-S ECDSA is non-malleable under nonstandard assumptions
|
2019-12-13 18:34:31 -05:00 |
|
Pieter Wuille
|
f1380bdc11
|
Completely specified
|
2019-12-13 15:31:18 -08:00 |
|
Pieter Wuille
|
40eccd5d3c
|
Merge pull request #180 from jonasnick/secret-key
Replace private key with secret key
|
2019-12-13 17:09:18 -05:00 |
|
Pieter Wuille
|
aa18fdb07e
|
Low-S ECDSA is non-malleable under nonstandard assumptions
|
2019-12-12 16:26:50 -08:00 |
|
Pieter Wuille
|
993a1ccdf1
|
Merge pull request #175 from real-or-random/patch-13
Clarify why we don't want short hashes
|
2019-12-12 17:34:53 -05:00 |
|
Pieter Wuille
|
b1d93cdd2c
|
Merge pull request #174 from hebasto/patch-1
Fix reference formatting
|
2019-12-11 20:25:49 -05:00 |
|
Pieter Wuille
|
2d68aea170
|
Merge pull request #161 from OrfeasLitos/max-sig-unhashed-bytes
Typo: max bytes hashed for sig is 210
|
2019-12-11 20:00:02 -05:00 |
|
Pieter Wuille
|
2a2d4231ff
|
Merge pull request #154 from OrfeasLitos/replace-66-with-146
Replace BIP66 link with BIP146
|
2019-12-11 19:59:33 -05:00 |
|
Pieter Wuille
|
16d34fafa1
|
Merge pull request #166 from stefanwouldgo/patch-3
fix singular/plural ambiguity
|
2019-12-11 19:59:06 -05:00 |
|
Pieter Wuille
|
4b4c656790
|
Merge pull request #162 from OrfeasLitos/signing-validation
Replace signing with signature before validation
|
2019-12-11 19:58:52 -05:00 |
|
Pieter Wuille
|
4b25ff7b92
|
Merge pull request #148 from OrfeasLitos/link-implicit-y-proof-sketch
Link to proof sketch of security of implicit Y
|
2019-12-10 18:58:28 -05:00 |
|
Pieter Wuille
|
2a738c6956
|
Merge pull request #165 from OrfeasLitos/wtxid-malleability
Mention hash_type malleability would change wtxid
|
2019-12-10 18:54:17 -05:00 |
|
Pieter Wuille
|
9194a7b582
|
Merge pull request #171 from jonasnick/footnote16
Clarify bip-taproot digest difference to bip143 regarding sub-hashes
|
2019-12-10 18:46:51 -05:00 |
|
Pieter Wuille
|
a9190ff92b
|
Merge pull request #172 from jonasnick/footnote9
Improve clarity of footnotes for lift_x
|
2019-12-10 18:45:19 -05:00 |
|