schnorr 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 552fd9baac0e3e4242003e0844c1e5d08dc69f46bf6b605f59293f9793c2c8a1
-  data.tar.gz: 4de25e1831dc171450435256e4e15f5734bfa8da522c57b5ffb90c9d0f1c32f9
+  metadata.gz: d7824a03bb8227a4fda5c6abccc1a8081053c843e1b1a99d4f7a3b5b75e71dd2
+  data.tar.gz: 92f8bd807b630221607c0b9fc4661e1b0feada22271e13db4063ff60921d50ac
 SHA512:
-  metadata.gz: dcff61f96ee167a43e31fa71b196c118ae8471c949271282c8d0f7b7bee3cc0ce94323d24e70c43619fdd3571f0084e652c1d251e0c07c59deccf63155757085
-  data.tar.gz: 891acabe7a536901ae0209798df11a6f3031dc90e534446ac8982a225ce1ce21c1d011d4e4378942af7cd52c11962082690c4bd51830d604fb0ff31d1a057391
+  metadata.gz: 06f01d84487925f4ce93f03a9b183edadfaa7e191c1824c37bc1c1b3b63569eb77438ed6d2395856a42b27f20450116b5139f8bfe23f602c936611db4d668c14
+  data.tar.gz: 2f9a61849124e10bad500d54c91b56f40f77c9e93c12ad8b529473b2f0fb68838320b747eeffa9243369a88a3445160201e6be2f08e14dd2029e2df7a47f479c

data/.ruby-version

@@ -1 +1 @@
-2.6.2
+2.6.3

data/.travis.yml

@@ -1,8 +1,8 @@
 language: ruby
 rvm:
-  - 2.6.2
+  - 2.6.3
   - 2.5.5
-  - 2.4.5
+  - 2.4.6
 
 bundler_args: --jobs=2
 

data/README.md

@@ -131,15 +131,22 @@ session_id = session.id
 ## each participant create own session.
 session = Schnorr::MuSig.session_initialize(session_id, private_key, message, combined_pubkey, ell, index)
 
+## participant send his commitment of nonce before send nonce itself.
+session.commitment 
+
+## participant collect other participant's commitments.
+session.commitments << commitment
+
 ## participant send his nonce and collect other participant's nonce.
 session.nonce
 
 other_nonces = [...]
 
 ## If collect all participant's nonce, then calculate combined nonce.
+## An error will occur if the previously collected commitment and nonce do not match. 
 ## In this method, if jacobi(y(combined_point)) != 1, 
 ## combined_point changed to combined_point.negate and session#nonce_negate changed to true.
-combined_nonce = session.nonce_combine(other_nonces)
+combined_nonce = session.combine_nonce(other_nonces)
 
 ## each participants create partial signature
 partial_sig = session.partial_sign(message, combined_nonce, combined_pubkey)

data/lib/schnorr/mu_sig.rb

@@ -46,8 +46,9 @@ module Schnorr
     # @param combined_pubkey (String) combined public key with binary format.
     # @param ell (String) ell with binary format.
     # @param index (Integer) public key index.
+    # @param num_signers (Integer) the number of signers.
     # @return (Schnorr::MuSig::Session) session object.
-    def session_initialize(session_id, private_key, message, combined_pubkey, ell, index)
+    def session_initialize(session_id, private_key, message, combined_pubkey, ell, index, num_signers)
       raise ArgumentError, 'session_id must be 32 bytes.' if session_id && session_id.bytesize != 32
       raise ArgumentError, 'message must be 32 bytes.' unless message.bytesize == 32
       raise ArgumentError, 'combined_pubkey must be 33 bytes.' unless combined_pubkey.bytesize == 33
@@ -55,14 +56,13 @@ module Schnorr
       secret = ECDSA::Format::IntegerOctetString.encode(private_key, ECDSA::Group::Secp256k1.byte_length)
 
       field = ECDSA::PrimeField.new(ECDSA::Group::Secp256k1.order)
-      session = Schnorr::MuSig::Session.new(session_id)
+      session = Schnorr::MuSig::Session.new(session_id, num_signers)
       coefficient = coefficient(ell, index)
       session.secret_key = field.mod(private_key * coefficient)
       session.secret_nonce = Digest::SHA256.digest(session.id + message + combined_pubkey + secret).unpack('H*').first.to_i(16)
       raise ArgumentError, 'secret nonce must be an integer in the ragen 1..n-1' unless field.include?(session.secret_nonce)
       point_r = ECDSA::Group::Secp256k1.new_point(session.secret_nonce)
       session.nonce = ECDSA::Format::PointOctetString.encode(point_r, compression: true)
-      session.commitment = Digest::SHA256.digest(session.nonce)
       session
     end
 

data/lib/schnorr/mu_sig/session.rb

@@ -3,25 +3,41 @@ module Schnorr
     class Session
 
       attr_reader :id               # binary
+      attr_reader :num_signers      # Integer
       attr_accessor :secret_key     # Integer
       attr_accessor :secret_nonce   # Integer
       attr_accessor :nonce          # binary
-      attr_accessor :commitment     # binary
       attr_accessor :nonce_negate   # Boolean
+      attr_reader :commitments      # commitments for other participants Array[]
 
-      def initialize(session_id = SecureRandom.random_bytes(32))
+      def initialize(session_id = SecureRandom.random_bytes(32), num_signers)
         @id = session_id
         @nonce_negate = false
+        @num_signers = num_signers
+        @commitments = []
       end
 
       def nonce_negate?
         @nonce_negate
       end
 
-      # Combine nonce
+      # Get self nonce commitment
+      # @return (String) commitment with binary format.
+      def commitment
+        Digest::SHA256.digest(nonce)
+      end
+
+      # Get combine nonce
       # @param nonces (Array[String]) an array of other signer's nonce with binary format.
       # @return (String) combined nonce with binary format.
-      def nonce_combine(nonces)
+      def combine_nonce(nonces)
+        raise ArgumentError, "Nonce is required for the number of other signers." unless num_signers == (nonces.length + 1)
+        raise ArgumentError, "The number of nonce and commitment does not match." unless nonces.length == commitments.length
+        # check nonce commitments
+        nonces.each do | nonce|
+          commitment = Digest::SHA256.digest(nonce)
+          raise ArgumentError, "Nonce: #{nonce.bth} is invalid. There is no corresponding commitment." unless commitments.include?(commitment)
+        end
         points = ([nonce]+ nonces).map.with_index {|n, index|ECDSA::Format::PointOctetString.decode(n, ECDSA::Group::Secp256k1)}
         r_point = points.inject(:+)
         unless ECDSA::PrimeField.jacobi(r_point.y, ECDSA::Group::Secp256k1.field.prime) == 1

data/lib/schnorr/version.rb

@@ -1,3 +1,3 @@
 module Schnorr
-  VERSION = "0.3.0"
+  VERSION = "0.4.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: schnorr
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - azuchi
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-04-09 00:00:00.000000000 Z
+date: 2019-11-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ecdsa