def verify_rs

bend-collections-laws-crypto@1.0.0.0 · spec/crypto/secp256k1/schnorr.bend:72

import Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/secp256k1/field.bend as FS
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/secp256k1/curve.bend as CV

72# R = s G - e P with e = int(hash_challenge(r || pk || m)) mod n
73def verify_rs(+one: Nat, +r: Nat, +s: Nat, +e: Nat, +pp: CV.SPoint) -> Bool:
74  +rr = CV.padd(p(one), CV.pmul(p(one), s, CV.g(one)), CV.pmul(p(one), FS.mneg(n(one), e), pp))
75  check_r(r, CV.is_inf(rr), CV.to_affine(p(one), rr))