5

I am reading about ECDSA and EdDSA. I was wondering what the Monero void crypto_ops::generate_signature signature is based upon. From the code, I see that the math to generate one is

k = rand()
t3 = kB
buf = H(data) || pk || t3
c = Hs(buf)
r = k - c.sk

and the signature then is the tuple (c,r). This seems to take some ideas from standard ECDSA, but I would like to know what scheme exactly is used here.

rubdos
  • 307
  • 1
  • 6

1 Answers1

3

The crypto_ops::generate_signature function is using the Schnorr signature scheme.

glv
  • 3,334
  • 10
  • 15