Struct schnorrkel::context::SigningTranscriptWithRng

pub struct SigningTranscriptWithRng<T, R>where
    T: SigningTranscript,
    R: RngCore + CryptoRng,{ /* private fields */ }

Schnorr signing transcript with the default ThreadRng replaced by an arbitrary CryptoRng.

If ThreadRng breaks on your platform, or merely if your paranoid, then you might “upgrade” from ThreadRng to OsRng by using calls like keypair.sign( attach_rng(t,OSRng::new()) ). We recommend instead simply fixing ThreadRng for your platform however.

There are also derandomization tricks like attach_rng(t,ChaChaRng::from_seed([0u8; 32])) for deterministic signing in tests too. Although derandomization produces secure signatures, we recommend against doing this in production because we implement protocols like multi-signatures which likely become vulnerabile when derandomized.

Trait Implementations

impl<T, R> SigningTranscript for SigningTranscriptWithRng<T, R>where T: SigningTranscript, R: RngCore + CryptoRng,

fn commit_bytes(&mut self, label: &'static [u8], bytes: &[u8])

Extend transcript with some bytes, shadowed by merlin::Transcript.

fn challenge_bytes(&mut self, label: &'static [u8], dest: &mut [u8])

Produce some challenge bytes, shadowed by merlin::Transcript.

fn witness_bytes( &self, label: &'static [u8], dest: &mut [u8], nonce_seeds: &[&[u8]] )

Produce secret witness bytes from the protocol transcript and any “nonce seeds” kept with the secret keys.

fn witness_bytes_rng<RR>( &self, label: &'static [u8], dest: &mut [u8], nonce_seeds: &[&[u8]], rng: RR )where RR: RngCore + CryptoRng,

Produce secret witness bytes from the protocol transcript and any “nonce seeds” kept with the secret keys.

fn proto_name(&mut self, label: &'static [u8])

Extend transcript with a protocol name

fn commit_point( &mut self, label: &'static [u8], compressed: &CompressedRistretto )

Extend the transcript with a compressed Ristretto point

fn challenge_scalar(&mut self, label: &'static [u8]) -> Scalar

Produce the public challenge scalar e.

fn witness_scalar(&self, label: &'static [u8], nonce_seeds: &[&[u8]]) -> Scalar

Produce a secret witness scalar k, aka nonce, from the protocol transcript and any “nonce seeds” kept with the secret keys.