chilldkg: Use proper random aux_bytes when signing

BlockstreamResearch · May 23, 2024 · 60265a3 · 60265a3
1 parent ffbca88
commit 60265a3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/reference/chilldkg.py b/reference/chilldkg.py
@@ -1,4 +1,5 @@
 # Reference implementation of BIP DKG.
+from secrets import token_bytes as random_bytes
 from typing import Tuple, List, NamedTuple, NewType, Optional
 
 from secp256k1ref.secp256k1 import Scalar
@@ -26,8 +27,7 @@
 
 
 def certifying_eq_participant_step(hostseckey: bytes, x: bytes) -> bytes:
-    # TODO: fix aux_rand
-    return schnorr_sign(x, hostseckey, b"0" * 32)
+    return schnorr_sign(x, hostseckey, random_bytes(32))
 
 
 def certifying_eq_verify(hostpubkeys: List[bytes], x: bytes, cert: bytes) -> bool: