lib: update secp256k1-musig to stable 0.33.0

Peterrequested to merge
secp256k1-musig-stable into master
  • check or remove this line after you've added a CHANGELOG entry or if your PR doesn't need one (they should go into CHANGELOG/unreleased/)

The secp256k1 0.32.0 betas were yanked from crates.io, so any fresh resolution of ark-lib fails (caught by check-use-bark-as-dependency; existing lockfiles were unaffected). Upstream released 0.33.0 yesterday, which supersedes the betas — 0.32.0 will never be released.

Call-site changes forced by the stable musig API:

  • SessionSecretRand::assume_unique_per_nonce_gen now takes the signer's secret key and mixes it into nonce derivation (upstream security hardening, per BIP-327 NonceGen).
  • KeyAggCache::nonce_gen was repurposed for counter-based nonces; the beta behavior is now nonce_gen_with_uniform_randomness, with extra_rand mandatory.

No compatibility impact: pubnonce/partial-sig wire formats and the persisted secnonce blob (size and magic) are unchanged, verified against both crate sources. Second commit is the optional from_seckey_byte_array → from_secret_bytes deprecation rename.

Merge request reports