internal static void secp256k1_musig_nonce_process_internal(
            ECMultContext ecmult_ctx,
            out bool fin_nonce_parity,
            Span <byte> fin_nonce,
            out Scalar b,
            Span <GEJ> aggnoncej,
            ReadOnlySpan <byte> agg_pk32,
            ReadOnlySpan <byte> msg)
        {
            Span <byte> noncehash = stackalloc byte[32];
            Span <GE>   aggnonce  = stackalloc GE[2];

            aggnonce[0] = aggnoncej[0].ToGroupElement();
            aggnonce[1] = aggnoncej[1].ToGroupElement();
            secp256k1_musig_compute_noncehash(noncehash, aggnonce, agg_pk32, msg);

            /* aggnonce = aggnonces[0] + b*aggnonces[1] */
            b = new Scalar(noncehash);
            var fin_nonce_ptj = ecmult_ctx.Mult(aggnoncej[1], b, null);

            fin_nonce_ptj = fin_nonce_ptj.Add(aggnonce[0]);
            var fin_nonce_pt = fin_nonce_ptj.ToGroupElement();

            ECXOnlyPubKey.secp256k1_xonly_ge_serialize(fin_nonce, ref fin_nonce_pt);

            fin_nonce_pt     = fin_nonce_pt.NormalizeYVariable();
            fin_nonce_parity = fin_nonce_pt.y.IsOdd;
        }
示例#2
0
        internal static GE secp256k1_musig_process_nonces_internal(
            ECMultContext ecmult_ctx,
            Span <byte> noncehash,
            Span <GEJ> summed_noncesj,
            ReadOnlySpan <byte> combined_pk32,
            ReadOnlySpan <byte> msg)
        {
            Scalar    b;
            GEJ       combined_noncej;
            Span <GE> summed_nonces = stackalloc GE[2];

            summed_nonces[0] = summed_noncesj[0].ToGroupElement();
            summed_nonces[1] = summed_noncesj[1].ToGroupElement();
            secp256k1_musig_compute_noncehash(noncehash, summed_nonces, combined_pk32, msg);

            /* combined_nonce = summed_nonces[0] + b*summed_nonces[1] */
            b = new Scalar(noncehash);
            combined_noncej = ecmult_ctx.Mult(summed_noncesj[1], b, null);
            combined_noncej = combined_noncej.Add(summed_nonces[0]);
            return(combined_noncej.ToGroupElement());
        }