Good morning Rusty, et al.,
> Note that this means no payment secret is necessary, since the incoming > `blinding` serves the same purpose. If we wanted to, we could (ab)use > payment_secret as the first 32-bytes to put in Carol's enc1 (i.e. it's > the ECDH for Carol to decrypt enc1). I confess to not reading everything in detail, but it seems to me that, with payment point + scalar and path decorrelation, we need to establish a secret with each hop anyway (the blinding scalar for path decorrelation), so if you need a secret per hop, possibly this could be reused as well? Regards, ZmnSCPxj _______________________________________________ Lightning-dev mailing list [email protected] https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev
