LLFourn / secp256kfun

A pure-rust secp256k1 library optimised for fun
BSD Zero Clause License
100 stars 29 forks source link

[musig2] two phase key aggregation #97

Closed LLFourn closed 1 year ago

LLFourn commented 2 years ago

Users must transition from a AggKey into an Bip340AggKey before starting a signing session. This is the idea:

  1. When it is a AggKey you can only apply ordinary tweaks (i.e. bip32)
  2. When it is a Bip340Aggkey you can only apply "xonly" tweaks. (i.e. taproot)

The code and spec makes way more sense to me now. We are down to a single needs_negation boolean we keep around. We can't implement all the spec tests for this since one test requires a ordinary tweak after a "xonly" tweak. I think I'll suggest removing that from the spec.

LLFourn commented 1 year ago

superseded by #37