Structure
P256K.Schnorr.SecureNonce
A signer’s secret nonce for MuSig2 operations, modeled as ~Copyable to prevent accidental duplication and nonce reuse.
- iOS 13.0+
- macCatalyst 13.0+
- macOS 10.15+
- tvOS 13.0+
- visionOS 1.0+
- watchOS 6.0+
struct SecureNonce
Mentioned In
Overview
Warning
Nonce reuse leaks the secret signing key. The upstream secp256k1_musig_partial_sign zeroes the secnonce after use (see Vendor/secp256k1-zkp/include/secp256k1_musig.h secp256k1_musig_nonce_gen: “This function overwrites the given secnonce with zeros and will abort if given a secnonce that is all zeros.”). Never copy or serialize the secret nonce bytes; always provide a unique sessionID per signing session.