The module is not compatible with BIP340 specification

[paulmillr]

bip-schnorr/src/schnorr.js

Line 32 in b6479ec

kPrime = math.deterministicGetK0(d, Px, message);

To simplify, you have if (auxRand is present) { use auxRand } else { deterministicGetK0() }

Specification https://github.com/bitcoin/bips/blob/master/bip-0340.mediawiki#default-signing says use auxRand should always be used. deterministicGetK0 is some weird workaround that should not be present. Also it reduces security.

[landabaso]

Hi @guggero. Could you please run this test?

git clone https://github.com/landabaso/sign_schnorr_test.git
cd sign_schnorr_test
npm install
npm run test

For some reason, results differ when auxRand is 32 0x00 bytes than when auxRand is not passed.