We must add condition that LNPBP-1 procedure must fail in case the tweaking factor greater than Sepck256k1 base point G order n.
This condition was absent before, because tweaking overflow does not affect commitment security due to DLP. However, while secp256k1 library tweaking function (used by Bitcoin Core) fails and we can't change its behavior, we have no other option than to fail as well.
We must add condition that LNPBP-1 procedure must fail in case the tweaking factor greater than Sepck256k1 base point
G
ordern
.This condition was absent before, because tweaking overflow does not affect commitment security due to DLP. However, while secp256k1 library tweaking function (used by Bitcoin Core) fails and we can't change its behavior, we have no other option than to fail as well.