Assessment reports>Nocturne>Discussion>Schnorr signature documentation typo

Schnorr signature documentation typo

In the provided documentation, the steps to implement Nocturne's variant of Schnorr signatures over the Baby Jubjub curve are described as follows:

  1. (derive the signing secret key from the spending key)

  2. (extract 32 bytes of entropy from the spending key)

  3. (sample another 32 random bytes)

  4. ("reduce" hash output into , using extra entropy from addition to the rng)

  5. (the rest is a "standard" Schnorr signature)

  6. The signature is the pair

In step 8, in the signature is generated using ; however, it should be generated using because the spending key is only used to derive the signing secret key.

Zellic © 2023Back to top ↑