bip-schnorr 0.7.0 → 0.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 62086f5dc865721a602e4ac25f1c58920eba47d0e7bb5ab59d389af297095750
-  data.tar.gz: 3e6ddfbc75956f04e84f01412b034974cb592ef1adea72775acdc949946d2ebf
+  metadata.gz: d448f075885c68f9c74b1627d328180ee271392781bd1b8f9850ec6fd9e2ee53
+  data.tar.gz: 633ddb345ba97a474205bf7d42953cffc4d2fae42f23aae2454cfdde57ba2c55
 SHA512:
-  metadata.gz: 4f599b83ba35a76df8425eb7eb436740f690ec011dcfc6eac65af1591bb748d1421dd71d2cf15c480e44302bd821ffda6f385799549a37f2a8159a592c510482
-  data.tar.gz: f7cb59f75a709bb05509697a55bd3864944a82d4a9768bc34db84da0b6a215b9060fa875722ebb597731f3df6a4155e738b419c413b5ef06278378f2b3055627
+  metadata.gz: 33b5ae79ea9aa07a76e532e7095d5f82b6dae8002610bdf19da74410f46240a2c06c2615cacf33a720f9b2ac5ec68fbf0837ed33e3f5e729fe0d474a83b82946
+  data.tar.gz: da1643275dbaf585d58add1265614be32496d7e4edeb70a7513be2290d30834f47f5f97f1044fa747b8f72ac35603595022c02914b82fd01fea265c669e5e98e

data/.github/workflows/ruby.yml

@@ -20,11 +20,12 @@ jobs:
     strategy:
       matrix:
         ruby:
-          - '3.0.6'
-          - '3.1.4'
-          - '3.2.2'
+          - '3.2'
+          - '3.3'
+          - '3.4'
+          - '4.0'
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:

data/.ruby-version

@@ -1 +1 @@
-ruby-3.2.0
+ruby-4.0.0

data/Gemfile

@@ -4,3 +4,5 @@ git_source(:github) {|repo_name| "https://github.com/#{repo_name}" }
 
 # Specify your gem's dependencies in bip-schnorrrb.gemspec
 gemspec
+
+gem 'csv'

data/bip-schnorrrb.gemspec

@@ -20,7 +20,7 @@ Gem::Specification.new do |spec|
   spec.bindir        = "exe"
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
-  spec.add_runtime_dependency "ecdsa_ext", "~> 0.5.0"
+  spec.add_runtime_dependency "ecdsa_ext", "~> 0.5.2"
 
   spec.add_development_dependency "bundler"
   spec.add_development_dependency "rake", ">= 12.3.3"

data/lib/schnorr/musig2/context/session.rb

@@ -57,14 +57,14 @@ module Schnorr
         k2 = r.has_even_y? ? k2 : GROUP.order - k2
         d = sk.bti
         raise ArgumentError, 'secret key value is out of range.' if d <= 0 || GROUP.order <= d
-        p = (GROUP.generator.to_jacobian * d).to_affine.encode
+        p = (GROUP.generator.to_jacobian * pad_scalar(d)).to_affine.encode
         raise ArgumentError, 'Public key does not match nonce_gen argument' unless p == nonce[64...97]
         a = key_agg_coeff(pubkeys, p)
         g = agg_ctx.q.has_even_y? ? 1 : GROUP.order - 1
         d = (g * agg_ctx.gacc * d)  % GROUP.order
         s = (k1 + b * k2 + e * a * d) % GROUP.order
-        r1 = (GROUP.generator.to_jacobian * k1).to_affine
-        r2 = (GROUP.generator.to_jacobian * k2).to_affine
+        r1 = (GROUP.generator.to_jacobian * pad_scalar(k1)).to_affine
+        r2 = (GROUP.generator.to_jacobian * pad_scalar(k2)).to_affine
         raise ArgumentError, 'R1 can not be infinity.' if r1.infinity?
         raise ArgumentError, 'R2 can not be infinity.' if r2.infinity?
         used_secnonces << nonce

data/lib/schnorr/musig2.rb

@@ -101,8 +101,8 @@ module Schnorr
       raise ArgumentError, 'k1 must not be zero.' if k1_i.zero?
       raise ArgumentError, 'k2 must not be zero.' if k2_i.zero?
 
-      r1 = (GROUP.generator.to_jacobian * k1_i).to_affine
-      r2 = (GROUP.generator.to_jacobian * k2_i).to_affine
+      r1 = (GROUP.generator.to_jacobian * pad_scalar(k1_i)).to_affine
+      r2 = (GROUP.generator.to_jacobian * pad_scalar(k2_i)).to_affine
       pub_nonce = r1.encode + r2.encode
       sec_nonce = k1 + k2 + pk
       [sec_nonce.unpack1('H*'), pub_nonce.unpack1('H*')]
@@ -148,12 +148,12 @@ module Schnorr
       agg_pk = [agg_ctx.x_only_pubkey].pack("H*")
       k1 = deterministic_nonce_hash(sk_, agg_other_nonce, agg_pk, msg, 0).bti
       k2 = deterministic_nonce_hash(sk_, agg_other_nonce, agg_pk, msg, 1).bti
-      r1 = (GROUP.generator.to_jacobian * k1).to_affine
-      r2 = (GROUP.generator.to_jacobian * k2).to_affine
+      r1 = (GROUP.generator.to_jacobian * pad_scalar(k1)).to_affine
+      r2 = (GROUP.generator.to_jacobian * pad_scalar(k2)).to_affine
       raise ArgumentError, 'R1 must not be infinity.' if r1.infinity?
       raise ArgumentError, 'R2 must not be infinity.' if r2.infinity?
       pub_nonce = r1.encode + r2.encode
-      pk = (GROUP.generator.to_jacobian * sk.bti).to_affine
+      pk = (GROUP.generator.to_jacobian * pad_scalar(sk.bti)).to_affine
       sec_nonce = ECDSA::Format::IntegerOctetString.encode(k1, GROUP.byte_length) +
         ECDSA::Format::IntegerOctetString.encode(k2, GROUP.byte_length) + pk.encode
       agg_nonce = aggregate_nonce([pub_nonce, agg_other_nonce])

data/lib/schnorr/util.rb

@@ -24,5 +24,17 @@ module Schnorr
     def string2point(str)
       ECDSA::Format::PointOctetString.decode(str, GROUP)
     end
+
+    # Pad +scalar+ with the group order so that its bit length is fixed,
+    # mitigating a timing leak of the bit length of a secret scalar.
+    # Since (k + i * n)G = kG, this does not change the resulting point.
+    # Only use this for secret scalars; padding a public scalar just costs an extra doubling.
+    # @param [Integer] scalar A secret scalar.
+    # @return [Integer] The padded scalar.
+    def pad_scalar(scalar)
+      k = scalar + GROUP.order
+      k += GROUP.order if k.bit_length == GROUP.order.bit_length
+      k
+    end
   end
 end

data/lib/schnorr/version.rb

@@ -1,3 +1,3 @@
 module Schnorr
-  VERSION = "0.7.0"
+  VERSION = "0.7.1"
 end

data/lib/schnorr.rb

@@ -31,7 +31,7 @@ module Schnorr
       aux_rand = DEFAULT_AUX
     end
 
-    p = (GROUP.generator.to_jacobian * d0).to_affine
+    p = (GROUP.generator.to_jacobian * pad_scalar(d0)).to_affine
     d = p.has_even_y? ? d0 : GROUP.order - d0
 
     t = aux_rand.nil? ? d : d ^ tagged_hash('BIP0340/aux', aux_rand).bti
@@ -40,7 +40,7 @@ module Schnorr
     k0 = ECDSA::Format::IntegerOctetString.decode(tagged_hash('BIP0340/nonce', t + p.encode(true) + message)) % GROUP.order
     raise 'Creation of signature failed. k is zero' if k0.zero?
 
-    r = (GROUP.generator.to_jacobian * k0).to_affine
+    r = (GROUP.generator.to_jacobian * pad_scalar(k0)).to_affine
     k = r.has_even_y? ? k0 : GROUP.order - k0
     e = create_challenge(r.x, p, message)
 
@@ -69,7 +69,6 @@ module Schnorr
   def check_sig!(message, public_key, signature)
     message = hex2bin(message)
     public_key = hex2bin(public_key)
-    public_key = [public_key].pack('H*') if hex_string?(public_key)
     raise InvalidSignatureError, 'The public key must be a 32-byte array.' unless public_key.bytesize == 32
 
     sig = Schnorr::Signature.decode(signature)

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: bip-schnorr
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.7.1
 platform: ruby
 authors:
 - azuchi
-autorequire: 
 bindir: exe
 cert_chain: []
-date: 2023-12-22 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ecdsa_ext
@@ -16,14 +15,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: 0.5.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: 0.5.2
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -98,7 +97,6 @@ homepage: https://github.com/chaintope/bip-schnorrrb
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -113,8 +111,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.1
-signing_key: 
+rubygems_version: 3.6.9
 specification_version: 4
 summary: The ruby implementation of bip-schnorr.
 test_files: []