Skip to content

Commit

Permalink
Exclude nonce_process from pre-processing steps
Browse files Browse the repository at this point in the history
  • Loading branch information
jesseposner committed Sep 2, 2022
1 parent b7607f9 commit d26100c
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions src/modules/musig/musig.md
Original file line number Diff line number Diff line change
Expand Up @@ -42,10 +42,10 @@ Essentially, the protocol proceeds in the following steps:

The aggregate signature can be verified with `secp256k1_schnorrsig_verify`.

Note that steps 1 to 6 can happen before the message to be signed is known to the signers.
Note that steps 1 to 5 can happen before the message to be signed is known to the signers.
Therefore, the communication round to exchange nonces can be viewed as a pre-processing step that is run whenever convenient to the signers.
This disables some of the defense-in-depth measures that may protect against API misuse in some cases.
Similarly, the API supports an alternative protocol flow where generating the aggregate key (steps 1 to 3) is allowed to happen after exchanging nonces (steps 4 to 6).
Similarly, the API supports an alternative protocol flow where generating the aggregate key (steps 1 to 3) is allowed to happen after exchanging nonces (steps 4 to 5).

# Verification

Expand Down

0 comments on commit d26100c

Please sign in to comment.