Struct sapio_secp256k1::XOnlyPublicKey

source · [−]

pub struct XOnlyPublicKey(_);

Expand description

An x-only public key, used for verification of Schnorr signatures and serialized according to BIP-340.

Examples

Basic usage:

use secp256k1::{rand, Secp256k1, KeyPair, XOnlyPublicKey};

let secp = Secp256k1::new();
let key_pair = KeyPair::new(&secp, &mut rand::thread_rng());
let xonly = XOnlyPublicKey::from_keypair(&key_pair);

Implementations

source

impl XOnlyPublicKey

source

pub fn as_ptr(&self) -> *const XOnlyPublicKey

Obtains a raw const pointer suitable for use with FFI functions.

source

pub fn as_mut_ptr(&mut self) -> *mut XOnlyPublicKey

Obtains a raw mutable pointer suitable for use with FFI functions.

source

pub fn from_keypair(keypair: &KeyPair) -> XOnlyPublicKey

Creates a new Schnorr public key from a Schnorr key pair.

source

pub fn from_slice(data: &[u8 ]) -> Result<XOnlyPublicKey, Error>

Creates a Schnorr public key directly from a slice.

Errors

Returns Error::InvalidPublicKey if the length of the data slice is not 32 bytes or the slice does not represent a valid Secp256k1 point x coordinate.

source

pub fn serialize(&self) -> [u8 ; 32]

Serializes the key as a byte-encoded x coordinate value (32 bytes).

source

pub fn tweak_add_assign<V: Verification>(
 &mut self,
 secp: &Secp256k1<V>,
 tweak: &[u8 ]
) -> Result<Parity, Error>

Tweaks an x-only PublicKey by adding the generator multiplied with the given tweak to it.

An opaque type representing the parity of the tweaked key, this should be provided to tweak_add_check which can be used to verify a tweak more efficiently than regenerating it and checking equality.

Errors

If the resulting key would be invalid or if the tweak was not a 32-byte length slice.

Examples

use secp256k1::{Secp256k1, KeyPair};
use secp256k1::rand::{RngCore, thread_rng};

let secp = Secp256k1::new();
let mut tweak = [0u8; 32];
thread_rng().fill_bytes(&mut tweak);

let mut key_pair = KeyPair::new(&secp, &mut thread_rng());
let mut public_key = key_pair.public_key();
public_key.tweak_add_assign(&secp, &tweak).expect("Improbable to fail with a randomly generated tweak");

source

pub fn tweak_add_check<V: Verification>(
 &self,
 secp: &Secp256k1<V>,
 tweaked_key: &Self,
 tweaked_parity: Parity,
 tweak: [u8 ; 32]
) -> bool

Verifies that a tweak produced by XOnlyPublicKey::tweak_add_assign was computed correctly.

Should be called on the original untweaked key. Takes the tweaked key and output parity from XOnlyPublicKey::tweak_add_assign as input.

Currently this is not much more efficient than just recomputing the tweak and checking equality. However, in future this API will support batch verification, which is significantly faster, so it is wise to design protocols with this in mind.

Returns

True if tweak and check is successful, false otherwise.

Examples

use secp256k1::{Secp256k1, KeyPair};
use secp256k1::rand::{thread_rng, RngCore};

let secp = Secp256k1::new();
let mut tweak = [0u8; 32];
thread_rng().fill_bytes(&mut tweak);

let mut key_pair = KeyPair::new(&secp, &mut thread_rng());
let mut public_key = key_pair.public_key();
let original = public_key;
let parity = public_key.tweak_add_assign(&secp, &tweak).expect("Improbable to fail with a randomly generated tweak");
assert!(original.tweak_add_check(&secp, &public_key, parity, tweak));