def sign_d

bend-collections-laws-crypto@1.0.0.0 · src/crypto/secp256k1/ecdsa.bend:140

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/secp256k1/bytes.bend as B

140# sign with a valid secret scalar d: x = int2octets(d),
141# h1' = bits2octets(h) = int2octets(bits2int(h) mod n)
142def sign_d(+h: List<&2, U32>, m: Maybe<&2, List<&2, Nat>>) -> Maybe<&2, Signature>:
143  match m:
144    case None{}: None{}
145    case Some{+d}:
146      +z = hash_scalar(h)
147      sign_drbg(z, d, drbg_init(cat(B.to_be(d), B.to_be(z))))