Starsig: schnorr signatures on Ristretto

Implementation of a simple Schnorr signature protocol implemented with Ristretto and Merlin transcripts.

• Specification

Features

• Simple message-based API.
• Flexible transcript-based API.
• Single signature verification.
• Batch signature verification.
• Compatible with ../musig API.
• Compatible with ../keytree key derivation API.
• VRF (aka “HMAC verifiable by a public key”) is in development.

Authors

• Oleg Andreev
• Cathie Yun