package octez-libs
Proof of possession scheme described in section 3.3
A proof of possession scheme uses a separate public key validation step, called a proof of possession, to defend against rogue key attacks. This enables an optimization to aggregate signature verification for the case that all signatures are on the same message.
type proof = Bytes.t
Equivalent to core_sign
with the DST given in the specification in section 4.2.3.
Equivalent to core_verify
with the DST given in the specification in section 4.2.3.
pop_proof sk
implements section 3.3.2.
pop_verify pk signature
implements section 3.3.3.
aggregate_verify pks msg aggregated_signature
performs a aggregate signature verification. It supposes the same message msg
has been signed. It implements the FastAggregateVerify algorithm specified in section 3.3.4.