Hi Lisa and ZmnSCPxj,
Lisa,
>Does the “additive blinding” scheme andrew lays out here[1] work for this
>scheme, or is that only a property of Schnorr sigs? (i.e. are disparate Y’s
>additive across sigs?)
Yep I think that anything that works with a single joint Schnorr public key can
be tran
Joost Jager writes:
>>
>> > We could
>> > simplify this to a single to_self_delay that is proposed by the
>> initiator,
>> > but what was the original reason to allow distinct values?
>>
>> Because I didn't fight hard enough for simplicity :(
>>
>
> But the people you were fighting with, what reas
Good morning Imai-san,
I believe for the download case this is superior:
https://lists.linuxfoundation.org/pipermail/lightning-dev/2019-June/002035.html
This has no restriction on the size of the data.
For the upload case, it seems for either OG AMP or with payment points +
scalars and payment
Good morning uSEkaCIO,
This is certainly interesting, though I lack the mathematical background to
double-check this.
I believe ajtowns has a SCRIPT useable today that enables payment points as
well, using 3 `OP_CODESEPARATOR`s.
This was rejected in the Adelaide meeting in 2018, I believe partl
Hi list,
It is generally believed that in order to do "payment points" we need either
the two party multisignature scheme 2p-ECDSA or 2p-Schnorr.
I think we can do it without them.
TL;DR Just use 2-of-2 OP_CHECKMULTISIG and do a single signer ECDSA adaptor
signature on one of the keys.
Backgr
