def sign_kz

bend-collections-laws-crypto@1.0.0.0 · spec/crypto/secp256k1/schnorr.bend:140

import Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/secp256k1/curve.bend as CV

140# k' = int(rand) mod n; fail if k' = 0
141def sign_kz(+one: Nat, +d: Nat, +pb: List<&2, U32>, +m: List<&2, U32>, +k0: Nat, zero: Bool) -> Maybe<&2, List<&2, U32>>:
142  match zero:
143    case True{}: None{}
144    case False{}: sign_r(one, d, pb, m, k0, CV.to_affine(p(one), CV.pmul(p(one), k0, CV.g(one))))