State minimization in MuSig2 signing sessions

Implementation
, ,
3

Have you considered CounterNonceGen from the BIP? Is the problem that it needs the secret key, but you may not want to access it at nonce generation time?

1 Like