@brandonblack/musig
v0.0.1-alpha.1
Published
JS implementation of MuSig. 1-dependency MuSig key aggregation, tweaking, and signing.
Downloads
128,982
Maintainers
Readme
MuSig in TypeScript
Zero dependency implementation of the MuSig Spec.
Similar to bitcoinjs/BIP32, requires a
user injected secp256k1 implementation. Two examples provided in
test/utils.ts
.
Works with ECMAScript 2019 if you provide a complete implementation of the
Crypto interface. If you want to use base_crypto
as test/utils.ts
does,
then requires ECMAScript 2020 BigInt.
Usage
npm i
npm run test # runs build
npm run bench
This example uses Buffer
for convenience, but it is not required, any
Uint8Array
will do.
import { MuSigFactory, Nonce } from '.';
import { tinyCrypto } from './test/utils';
import * as tiny from 'tiny-secp256k1';
const musig = MuSigFactory(tinyCrypto);
const fromHex = (hex: string): Uint8Array => Buffer.from(hex, 'hex');
const toHex = (bytes: Uint8Array): string => Buffer.from(bytes).toString('hex');
const secretKey1 = fromHex('be01d8dcf3879a0fec05130ca95d35bf7823833e3cdf91e310408606717055d9');
const pubKey1 = fromHex('648c0c80c8520875c22a1cf31cd718b72a50e381731bc7f8efec9944074cb21b');
const secretKey2 = fromHex('644b07a5cb70f68316cd9a51cabdc61c4d0b1f38b189d0c92370a3844fd0241f');
const pubKey2 = fromHex('8c9444613a1bb8b442b81cc7fbf81a186a34d7c4e596362543e17dde3efdc4b3');
const tweak = fromHex('8df63a82e5e71884bb16e2896e12ba2b7fe0e670d466be03b578fc435d5c9876');
const { publicKey, keyAggSession } = musig.keyAgg(
[pubKey1, pubKey2],
{ tweaks: [tweak], tweaksXOnly: [true] }
);
const msg = fromHex('f1d1d6ef2d97319149aaed92c69ebb21d6c54c0fc4e908f4f4ee42a1e5b8b854');
// Signing round 1 - generate nonces, share public nonces
const nonce1: { secretNonce?: Uint8Array, publicNonce: Uint8Array } = musig.nonceGen({
sessionId: fromHex('0000000000000000000000000000000000000000000000000000000000000001'),
secretKey: secretKey1,
msg,
publicKey,
});
const nonce2: { secretNonce?: Uint8Array, publicNonce: Uint8Array } = musig.nonceGen({
sessionId: fromHex('0000000000000000000000000000000000000000000000000000000000000001'),
secretKey: secretKey2,
msg,
publicKey,
});
const sharedPublicNonces = [nonce1.publicNonce, nonce2.publicNonce];
const aggNonce = musig.nonceAgg(sharedPublicNonces);
// Signing round 2 - generate and share partial sigs, verify and aggregate
const { sig: sig1, signingSession: signingSession1 } = musig.partialSign({
msg,
secretKey: secretKey1,
nonce: nonce1 as Nonce,
aggNonce,
keyAggSession
});
delete nonce1.secretNonce;
const { sig: sig2, signingSession: signingSession2 } = musig.partialSign({
msg,
secretKey: secretKey2,
nonce: nonce2 as Nonce,
aggNonce,
keyAggSession
});
delete nonce2.secretNonce;
const sharedSigs = [sig1, sig2];
const check2By1 = musig.partialVerify({
sig: sharedSigs[1],
msg,
publicKey: pubKey2,
publicNonce: sharedPublicNonces[1],
aggNonce,
keyAggSession,
signingSession: signingSession1 // Optional
});
const check1By2 = musig.partialVerify({
sig: sharedSigs[0],
msg,
publicKey: pubKey1,
publicNonce: sharedPublicNonces[0],
aggNonce,
keyAggSession,
signingSession: signingSession2 // Optional
});
console.log(`check2By1: ${!!check2By1}, check1By2: ${!!check1By2}`);
const signingSession = musig.createSigningSession(aggNonce, msg, keyAggSession);
// All of the signing sessions are interchangeable, and derived from public information
const sig = musig.signAgg(sharedSigs, signingSession);
console.log(toHex(sig));
// 13a8d88bb5727fe945293f81f0f1000eecb8ded5ca950bcfb74d6536d456372b9ae00ccb9cbacc00a3bca07129920b88d4df4f5c24ece1f7159ff94c1dde1bba
const valid = tiny.verifySchnorr(msg, publicKey, sig);
console.log(`final sig valid: ${valid}`);