Zero-Knowledge Goof
· 3w
Yes I knew this! https://github.com/LLFourn/dlc-sec/blob/master/main.pdf
It seems I found Dryja’s scheme is actually sound if you come up with a reasonable definition of oracle security which match...
(But to be clear you cannot use the oracles key as a signing key for schnorr — it obviously doesn’t compose)