> H( private-key, msg, other-party's-nonce-pair, 1 )
That should work. I had thought that other-party's-nonce-pair would be unique unknown randomness, but I can see now that it can be rederived from RA(n) or RB(n). > Hmm, you had me panicking that I'd been describing how to combine the > two despite having decided it wasn't necessary to combine them... Ah, should have read that part more closely. The proposal uses the single sig adaptor sig variant. _______________________________________________ Lightning-dev mailing list [email protected] https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev
