BIP 340 updates: even pubkeys, more secure nonce generation



Summary:

Pieter Wuille has made a number of small changes to BIP 340-342 despite saying earlier that he expected no further semantical changes to the document. In change (1), the Y coordinate of 32-byte public keys is changed from implicitly square to implicitly even. This change makes signing slightly faster and simplifies integration with existing key generation infrastructure. Change (2) deals with more secure nonce generation in BIP 340 by including public key data in the nonce generation, implementing actual signing-time randomness into the nonce generation process, and using a different way of mixing in this randomness to protect against differential power analysis. Additionally, new tagged hash tags were added to make sure any code written for the earlier BIP text fails consistently. Despite being included in the alternative signing section, LL suggests having test vectors for these alternative methods and even having their own BIP.


Updated on: 2023-06-13T23:39:11.976479+00:00