reply on: waxwing commentary on twist attacks + bitcoin’s curve \ stacker news ~bitdevs

pull down to refresh

0 sats \ 3 replies \ @0260378aef 4 Jan \ parent \ on: waxwing commentary on twist attacks + bitcoin’s curve bitdevs

I guess it's just my lack of knowledge of something about golang? But I can't find github.com/decred/dcrd/dcrec/secp256k1/v4 , nor can I find a v4 (or v4.*) branch?

0 sats \ 2 replies \ @0260378aef 4 Jan

So I guess it must be this one?

https://github.com/decred/dcrd/blob/8208daf4c708454b408699d31ca923ef321637a5/dcrec/secp256k1/ecdh.go#L14C6-L14C26

What's input is a PubKey object, which I guess will be got by calling ParsePubKey, here?:

https://github.com/decred/dcrd/blob/8208daf4c708454b408699d31ca923ef321637a5/dcrec/secp256k1/pubkey.go#L104

and it is checking that it's a valid point (actually, it's also checking in the case when the point is uncompressed, as you'd hope/expect. (line 141)

0 sats \ 1 reply \ @ek 4 Jan freebie

So I guess it must be this one?

Sorry, using GenerateSharedSecret was confusing. I didn't mean the function in secpk256k1. I meant the function in my NIP-44 library and that I am currently skipping tests because I assumed that secp256k1 keys are always valid of strong. However, if they are generated usingsecp256k1.PrivKeyFromBytes they might not be valid or contain weaknesses.

See this reply from me, hopefully it unconfuses you :)