Commit Graph
100 Commits
Author SHA1 Message Date
Pieter Wuille 05a03f2d61 Merge pull request #209 from real-or-random/patch-17
BIP340: Fix typo
2020-08-04 10:05:35 -07:00
Pieter Wuille e331aadf92 Merge pull request #206 from jonasnick/some-fixups
BIP-0340: Miscellaneous fixups
2020-07-21 19:38:23 -07:00
Pieter Wuille 1e2d05609f Merge pull request #208 from sipa/202007_nobitloss
Clarify security argument of x-only pubkeys
2020-07-21 19:36:23 -07:00
Pieter Wuille cf2937c811 Merge pull request #202 from ysangkok/bip-0340-typing
Typing annotations for BIP-0340
2020-04-10 13:44:55 -07:00
Pieter Wuille 1d999cf678 Merge pull request #203 from jonasnick/remove-is-negated
BIP-0341: Replace notion of is_negated with parity bit
2020-04-06 19:25:18 -07:00
Pieter Wuille 038615b7c7 Merge pull request #200 from real-or-random/prints
Add debug print for intermediate values
2020-04-02 16:34:24 -07:00
Pieter Wuille 9abbfa53c9 Merge pull request #199 from real-or-random/patch-16
Fix a few minor issues
2020-03-04 15:49:20 -08:00
Pieter Wuille 88d30c704f Address comments 2020-02-23 19:45:10 -08:00
Pieter Wuille 806b46fde1 Switch to new synth nonce scheme and make it default 2020-02-23 19:43:20 -08:00
Pieter Wuille d11cf65b6c Change tags to prevent inconsistent breakage with earlier draft 2020-02-23 19:35:22 -08:00
Pieter Wuille 6581a87ff2 Switch to even-y tiebreaker for pubkeys 2020-02-23 19:33:35 -08:00
Pieter Wuille 9cf4038f17 fix BIP links 2020-01-20 07:35:26 -08:00
Pieter Wuille 9de7dfccfa Add to README 2020-01-19 14:48:58 -08:00
Pieter Wuille c3b91dcc22 Fixes to headers 2020-01-19 14:48:58 -08:00
Pieter Wuille fa305e5abd Make buildtable.pl support Requires: field 2020-01-19 14:48:58 -08:00
Pieter Wuille e1914b8173 fixes 2020-01-19 14:48:58 -08:00
Pieter Wuille eb641cbdb5 Address jonas' comments 2020-01-19 14:47:33 -08:00
Pieter Wuille 1faa4b19bc Rename BIPs 2020-01-19 14:47:33 -08:00
Pieter Wuille 57ed6cb342 Abstract out common signature message calculation 2020-01-19 14:47:33 -08:00
Pieter Wuille d9ec5f43da Update acknowledgements, remove authors 2020-01-19 14:47:33 -08:00
Pieter Wuille cd8ea88987 Delete precompiled file 2020-01-19 14:47:33 -08:00
Pieter Wuille ff8a36200b Redefine leaf versions to be incrementally increasing from 0 2020-01-19 14:47:33 -08:00
Pieter Wuille 92e3d6ca87 Update Post-History field for taproot/tapscript 2020-01-19 14:47:33 -08:00
Pieter Wuille f429750036 Update authors 2020-01-19 14:47:33 -08:00
Pieter Wuille 460163ee0b Add rationale on security assumptions 2020-01-19 14:47:33 -08:00
Pieter Wuille 94e9c0925a Add an informal summary of the design 2020-01-19 14:47:33 -08:00
Pieter Wuille 84161e187d Improve and restructure motivation and design 2020-01-19 14:47:33 -08:00
Pieter WuilleandTim Ruffing 2c8feb1cbb Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <crypto@timruffing.de>
2020-01-19 14:47:33 -08:00
Pieter Wuille 9c76bb457f Linearity makes sign-for-sum-of-keys easier, not possible entirely.
I'm sure it's possible to construct a complex MPC that can sign for the
sum of keys under ECDSA as well.
2020-01-19 14:47:33 -08:00
Pieter Wuille 3c1f466372 Completely specified 2020-01-19 14:47:33 -08:00
Pieter Wuille 687ec4ba8e Low-S ECDSA is non-malleable under nonstandard assumptions 2020-01-19 14:47:33 -08:00
Pieter Wuille ae7122822a Settle on notation: is_square(y), has_square_y(P) 2020-01-19 14:47:33 -08:00
Pieter Wuille dbbe690c8a Consistently mention resource limits in bip-tapscript 2020-01-19 14:47:33 -08:00
Pieter WuilleandTim Ruffing 9c1670f345 Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
2020-01-19 14:47:33 -08:00
Pieter WuilleandTim Ruffing 83cebb5326 Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
2020-01-19 14:47:33 -08:00
Pieter Wuille 1695f073d3 Elaborate on default and alternative signing 2020-01-19 14:47:33 -08:00
Pieter Wuille fc0a4ef542 Explain why CMS is not turned into SUCCESSx 2020-01-19 14:47:33 -08:00
Pieter Wuille 2059b9e35a Address aj comments 2020-01-19 14:47:33 -08:00
Pieter Wuille 3595c30acd Improve section on alternatives to OP_CHECKMULTISIG 2020-01-19 14:47:33 -08:00
Pieter Wuille 23c1c3ed8b More on key generation 2020-01-19 14:47:33 -08:00
Pieter Wuille 7a7ab111c9 Clarify interaction x-only keys with verification 2020-01-19 14:47:33 -08:00
Pieter WuilleandTim Ruffing 20f9901809 Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
2020-01-19 14:47:33 -08:00
Pieter Wuille aef148ffc6 Explain that MuSig needs key prefixing 2020-01-19 14:47:33 -08:00
Pieter Wuille 565ac4f717 Typo 2020-01-19 14:47:33 -08:00
Pieter Wuille 96a199ac8c Drop other curve comment 2020-01-19 14:47:33 -08:00
Pieter Wuille 281df660b9 Prefix infinite with is_ 2020-01-19 14:47:33 -08:00
Pieter WuilleandTim Ruffing e29d82dc88 Apply suggestions from code review
Co-Authored-By: Tim Ruffing <tim@timruffing.de>
2020-01-19 14:47:33 -08:00
Pieter Wuille 0d4191bae5 Formulate claims about BatchVerify more accurately 2020-01-19 14:47:33 -08:00
Pieter Wuille 7f5926703a Use is_square/is_positive and introduce algorithm names 2020-01-19 14:47:33 -08:00
Pieter Wuille 9b9fab9a03 HTTPS links where possible 2020-01-19 14:47:33 -08:00
Pieter Wuille 406bc17c16 Small fixes from review with real-or-random 2020-01-19 14:47:33 -08:00
Pieter Wuille 276d9d338b Small fix: 0xc1 is possible as first control block byte 2020-01-19 14:47:33 -08:00
Pieter Wuille c93e298518 Increase max Merkle path length 2020-01-19 14:47:33 -08:00
Pieter Wuille fb486d7e13 Fix formula 2020-01-19 14:47:33 -08:00
Pieter Wuille 79f9fc4cc8 Extend input_index from 16 to 32 bits 2020-01-19 14:47:33 -08:00
Pieter Wuille d9a30c954f Extend codeseparator_position from 16 to 32 bits 2020-01-19 14:47:33 -08:00
Pieter Wuille 2202615b7c Fixups 2020-01-19 14:47:33 -08:00
Pieter Wuille 4087834c73 Move/reword tagged hashes motivation 2020-01-19 14:47:33 -08:00
Pieter Wuille 499106c57b Rework resource limits section 2020-01-19 14:47:33 -08:00
Pieter Wuille 972136beb6 Remove P2SH support 2020-01-19 14:47:33 -08:00
Pieter Wuille 8886eb4071 Address some nits 2020-01-19 14:47:33 -08:00
Pieter Wuille c7d7034b16 Add taproot/tapscript bips drafts 2020-01-19 14:47:33 -08:00
Pieter Wuille 6e77233b57 Add draft for Schnorr BIP
Includes squashed contributions by GitHub users jonasnick,
real-or-random, AustinWilliams, JustinTArthur, ysangkok,
RCassatta, Sjors, tnakagawa, and guggero.
2020-01-19 14:47:33 -08:00
Pieter Wuille ffa91573d2 Merge pull request #186 from sipa/202001_commonsighash
Abstract out common signature message calculation
2020-01-16 13:04:36 -05:00
Pieter Wuille 0e3b6c595c Address jonas' comments 2020-01-14 10:28:49 -08:00
Pieter Wuille 86eea8adb4 Merge pull request #187 from sipa/202001_acks
Update acknowledgements, remove authors
2020-01-14 10:01:09 -05:00
Pieter Wuille 7497bdeceb Update acknowledgements, remove authors 2020-01-13 14:39:32 -08:00
Pieter Wuille c0d2f93f3c Abstract out common signature message calculation 2020-01-13 14:10:26 -08:00
Pieter Wuille 138c62c8b0 Delete precompiled file 2020-01-13 07:27:18 -08:00
Pieter Wuille bdef41ab58 Merge pull request #185 from sipa/202001_shifted_leaf_v
Rewrite leaf versions rationale
2020-01-13 10:26:14 -05:00
Pieter Wuille 39a18f4b18 Redefine leaf versions to be incrementally increasing from 0 2020-01-08 07:39:30 -08:00
Pieter Wuille 6a36adea8d Merge pull request #184 from real-or-random/patch-15
clarify nonce generation
2020-01-05 06:06:47 -05:00
Pieter Wuille 1d2166edc9 Merge pull request #183 from sipa/201912_authors
Update authors
2019-12-19 12:41:43 -05:00
Pieter Wuille ded38826ce Merge pull request #167 from stefanwouldgo/patch-4
more precise wording: limits on tx+block size -> block weight limit
2019-12-19 12:41:25 -05:00
Pieter Wuille 17b3f9e01a Update Post-History field for taproot/tapscript 2019-12-17 17:27:36 -08:00
Pieter Wuille b90b53cd17 Update authors 2019-12-17 17:27:22 -08:00
Pieter Wuille cb187012b6 Merge pull request #181 from sipa/201912_reorder_motivation
Restructure motivation/design and add informal summary
2019-12-17 14:31:28 -05:00
Pieter Wuille b979c47893 Merge pull request #182 from pinheadmz/example1
bip-taproot: Explain example from script-tree diagram
2019-12-17 14:30:56 -05:00
Pieter Wuille 882e46350d Add rationale on security assumptions 2019-12-16 10:52:43 -08:00
Pieter Wuille 1c163188ee Add an informal summary of the design 2019-12-15 22:37:22 -08:00
Pieter Wuille 01e5bfbf19 Improve and restructure motivation and design 2019-12-15 13:28:58 -08:00
Pieter Wuille cb1cec770b Merge pull request #176 from sipa/201912_linear_is_easy
Linearity makes sign-for-sum-of-keys easier, not possible entirely.
2019-12-14 16:25:11 -05:00
Pieter Wuille 7c7aead1c1 Merge pull request #179 from real-or-random/patch-14
Mention that we don't change the hash function
2019-12-14 16:24:52 -05:00
Pieter Wuille 6b50893798 Merge pull request #178 from sipa/201912_schnorr_consensus_exact
Consistent validity
2019-12-14 16:24:32 -05:00
Pieter WuilleandTim Ruffing 83adab4af9 Update bip-schnorr.mediawiki
Co-Authored-By: Tim Ruffing <crypto@timruffing.de>
2019-12-13 15:38:15 -08:00
Pieter Wuille a8ebb65eb1 Linearity makes sign-for-sum-of-keys easier, not possible entirely.
I'm sure it's possible to construct a complex MPC that can sign for the
sum of keys under ECDSA as well.
2019-12-13 15:37:50 -08:00
Pieter Wuille 431ebd2f44 Merge pull request #177 from sipa/201912_lows_ecdsa_nonmalleable
Low-S ECDSA is non-malleable under nonstandard assumptions
2019-12-13 18:34:31 -05:00
Pieter Wuille f1380bdc11 Completely specified 2019-12-13 15:31:18 -08:00
Pieter Wuille 40eccd5d3c Merge pull request #180 from jonasnick/secret-key
Replace private key with secret key
2019-12-13 17:09:18 -05:00
Pieter Wuille aa18fdb07e Low-S ECDSA is non-malleable under nonstandard assumptions 2019-12-12 16:26:50 -08:00
Pieter Wuille 993a1ccdf1 Merge pull request #175 from real-or-random/patch-13
Clarify why we don't want short hashes
2019-12-12 17:34:53 -05:00
Pieter Wuille b1d93cdd2c Merge pull request #174 from hebasto/patch-1
Fix reference formatting
2019-12-11 20:25:49 -05:00
Pieter Wuille 2d68aea170 Merge pull request #161 from OrfeasLitos/max-sig-unhashed-bytes
Typo: max bytes hashed for sig is 210
2019-12-11 20:00:02 -05:00
Pieter Wuille 2a2d4231ff Merge pull request #154 from OrfeasLitos/replace-66-with-146
Replace BIP66 link with BIP146
2019-12-11 19:59:33 -05:00
Pieter Wuille 16d34fafa1 Merge pull request #166 from stefanwouldgo/patch-3
fix singular/plural ambiguity
2019-12-11 19:59:06 -05:00
Pieter Wuille 4b4c656790 Merge pull request #162 from OrfeasLitos/signing-validation
Replace signing with signature before validation
2019-12-11 19:58:52 -05:00
Pieter Wuille 4b25ff7b92 Merge pull request #148 from OrfeasLitos/link-implicit-y-proof-sketch
Link to proof sketch of security of implicit Y
2019-12-10 18:58:28 -05:00
Pieter Wuille 2a738c6956 Merge pull request #165 from OrfeasLitos/wtxid-malleability
Mention hash_type malleability would change wtxid
2019-12-10 18:54:17 -05:00
Pieter Wuille 9194a7b582 Merge pull request #171 from jonasnick/footnote16
Clarify bip-taproot digest difference to bip143 regarding sub-hashes
2019-12-10 18:46:51 -05:00
Pieter Wuille a9190ff92b Merge pull request #172 from jonasnick/footnote9
Improve clarity of footnotes for lift_x
2019-12-10 18:45:19 -05:00