diff --git a/bip-0327.mediawiki b/bip-0327.mediawiki index 1cb2b64fec..aa8091b73f 100644 --- a/bip-0327.mediawiki +++ b/bip-0327.mediawiki @@ -606,7 +606,7 @@ Algorithm ''DeterministicSign(sk, aggothernonce, pk1..u, tweak1. ** The secret signing key ''sk'': a 32-byte array ** The aggregate public nonce ''aggothernonce'' (see [[#modifications-to-nonce-generation|above]]): a 66-byte array ** The number ''u'' of individual public keys with ''0 < u < 2^32'' -** The individual public keys ''pk1..u'': ''u'' 32-byte arrays +** The individual public keys ''pk1..u'': ''u'' 33-byte arrays ** The number ''v'' of tweaks with ''0 ≤ v < 2^32'' ** The tweaks ''tweak1..v'': ''v'' 32-byte arrays ** The tweak methods ''is_xonly_t1..v'': ''v'' booleans @@ -623,7 +623,7 @@ Algorithm ''DeterministicSign(sk, aggothernonce, pk1..u, tweak1. * Let ''ki = int(hashMuSig/deterministic/nonce(sk' || aggothernonce || aggpk || bytes(8, len(m)) || m || bytes(1, i - 1))) mod n'' for ''i = 1,2'' * Fail if ''k1 = 0'' or ''k2 = 0'' * Let ''R⁎,1 = k1⋅G, R⁎,2 = k2⋅G'' -* Let ''pubnonce = cbytes(R⁎,2) || cbytes(R⁎,2)'' +* Let ''pubnonce = cbytes(R⁎,1) || cbytes(R⁎,2)'' * Let ''d = int(sk)'' * Fail if ''d = 0'' or ''d ≥ n'' * Let ''pk = cbytes(d⋅G)'' @@ -782,6 +782,8 @@ An exception to this rule is MAJOR version zero (0.y.z) which is fo The MINOR version is incremented whenever the inputs or the output of an algorithm changes in a backward-compatible way or new backward-compatible functionality is added. The PATCH version is incremented for other changes that are noteworthy (bug fixes, test vectors, important clarifications, etc.). +* '''1.0.3''' (2026-01-05): +** Fix minor bugs in the specification of ''DeterministicSign''. * '''1.0.2''' (2024-07-22): ** Fix minor bug in the specification of ''DeterministicSign'' and add small improvement to a ''PartialSigAgg'' test vector. * '''1.0.1''' (2024-05-14):