📅 Original date posted:2021-10-10
📝 Original message:
> H( private-key, msg, other-party's-nonce-pair, 1 )
That should work. I had thought that other-party's-nonce-pair would be unique
unknown randomness, but I can see now that it can be rederived from RA(n) or
RB(n).
> Hmm, you had me panicking that I'd been describing how to combine the
> two despite having decided it wasn't necessary to combine them...
Ah, should have read that part more closely. The proposal uses the single sig
adaptor sig variant.
