message signing – How one can confirm {that a} signature was signed by a pubkey? Taproot and BIP0322

Utilizing wallets like XVerse, customers can signal a message utilizing their ordinal btc tackle, for example bc1XXX, the message is hashed based mostly on BIP0322.

So I’ve:

• Person pockets: bc1XXX
• Message hash: YYY
• Signature signed by bc1XXX: ZZZ

So this knowledge is distributed to my backend server, and I need to confirm that ZZZ was certainly signed by bc1XXX (and comprises YYY as message).

I am utilizing this to this point:

    const msgHash = bip0322Hash(message);
    const signatureBuffer = Buffer.from(signatureStr, 'base64');

    const decodedSignature = signatureBuffer.slice(2, 66);
    const recoveryId = signatureBuffer[0];

    // Extract public key from the signature
    const recoveredPublicKeyBuffer = secp.recoverPublicKey(
        msgHash,
        decodedSignature,
        recoveryId, // Restoration ID (0 or 1)
        false
    );
    console.log(publicKeyToTaprootAddress(recoveredPublicKeyBuffer)); //no match with my authentic pubkey that signed the message

However I’ve a tough time getting the right tackle from recoveredPublicKeyBuffer which I am unable to match with the general public key tackle of my check set.

I am attempting to make use of this operate, however the output does not match my pubkey:

    operate publicKeyToTaprootAddress(publicKey: Uint8Array) {
        // Compute the SHA-256 hash of the general public key
        const hash = sha256(Buffer.from(publicKey));

        // Assemble the human-readable half and the information a part of the Bech32m string
        const hrp = 'bc';
        const knowledge = sha256(Buffer.from([0x01].concat(Array.from(hash))));
        const data2 = bech32m.toWords(Buffer.from(knowledge));

        // Encode the Bech32m string
        return bech32m.encode(hrp, data2);
    }