Crate blvm_secp256k1 

commons-secp256k1: Rust reimplementation of libsecp256k1

Pure Rust implementation with vendored ASM for hot paths (ARM32 field, x86_64 scalar). No FFI to C — all logic in Rust.

Context-free API

This crate is stateless and context-free. Unlike rust-secp256k1, there is no Secp256k1<C> context object. All functions take raw bytes, points, or scalars directly. No global mutable state. MuSig uses a Session struct (created from aggnonce + msg + keyagg_cache) — this is algorithm state, not a global context.

Modules

ecdh

ECDH: Elliptic Curve Diffie-Hellman shared secret.

ecdsa

ECDSA signatures for secp256k1.

ecmult

Elliptic curve multiplication: R = naA + ngG

ellswift

ElligatorSwift encoding for secp256k1 (BIP 324 v2 transport).

field

Field element arithmetic for secp256k1.

group

Group operations for secp256k1.

musig

MuSig2 for BIP340-compatible multi-signatures (BIP 327).

scalar

Scalar arithmetic modulo the secp256k1 group order n.

schnorr

BIP 340 Schnorr signatures for secp256k1.

schnorr_half_agg

BIP 340 Schnorr half-aggregation.

taproot

BIP 341 Taproot utilities.

Functions

ecmult_const

R = q*A (constant-time w.r.t. q); public point A is allowed to use variable precomputation. If A is infinity, r is set to infinity.

ecmult_gen_const

Constant-time r = k*G using the multi-comb. Public API.

ecmult_gen_precompute

Eagerly build the comb context. Useful for callers that don’t want first-call latency.