Struct schnorrkel::vrf::Malleable

pub struct Malleable<T: SigningTranscript>(pub T);

VRF SigningTranscript for malleable VRF ouputs.

Warning We caution that malleable VRF outputs are insecure when used in conjunction with HDKD, as provided in dervie.rs. Attackers could translate malleable VRF outputs from one soft subkey to another soft subkey, gaining early knowledge of the VRF output. We think most VRF applicaitons for which HDKH soudns suitable benefit from using implicit certificates insead of HDKD anyways, which should also be secure in combination with HDKD. We always use non-malleable VRF inputs in our convenience methods.

Tuple Fields

0: T

Trait Implementations

impl<T: Clone + SigningTranscript> Clone for Malleable<T>

fn clone(&self) -> Malleable<T>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<T> VRFSigningTranscript for Malleable<T>where
    T: SigningTranscript,

type T = T

Real underlying SigningTranscript

fn transcript_with_malleability_addressed(self, _publickey: &PublicKey) -> T

Return the underlying SigningTranscript after addressing VRF output malleability, usually by making it non-malleable,