P256K.Schnorr.SchnorrSignature

64-byte BIP-340 Schnorr signature over the secp256k1 elliptic curve, produced by secp256k1_schnorrsig_sign_custom and verified by secp256k1_schnorrsig_verify (both declared in Vendor/secp256k1/include/secp256k1_schnorrsig.h).

iOS 13.0+
macCatalyst 13.0+
macOS 10.15+
tvOS 13.0+
visionOS 1.0+
watchOS 6.0+

struct SchnorrSignature

Overview

BIP-340 Schnorr signatures always have a fixed 64-byte encoding: the 32-byte R.x coordinate of the nonce point followed by the 32-byte scalar s. There is no DER encoding or alternative format. Unlike ECDSA, Schnorr signatures have a unique representation for a given (message, key, nonce) triple — there is no (r, ±s) symmetry to normalize.

Topics