law Sign.correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/secp256k1/laws_sign.bend:20

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/secp256k1.bend as K
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/secp256k1/ecdsa.bend as ES

20# ECDSA signing: RFC 6979 nonce, low s, recovery id; r || s || v
21law Sign.correct:
22  for +one: Nat
23  for +h1: {one == 1n : Nat}
24  for +sk: List<&2, U32>
25  for +h: List<&2, U32>
26  {K.sign_compact(sk, h) == ES.sign(one, sk, h) : Maybe<&2, List<&2, U32>>}