From jonasdnick at gmail.com  Sun Oct 10 18:01:55 2021
From: jonasdnick at gmail.com (Jonas Nick)
Date: Sun, 10 Oct 2021 18:01:55 +0000
Subject: [Lightning-dev] Lightning over taproot with PTLCs
In-Reply-To: <20211009135939.GC4108@erisian.com.au>
References: <20211009011207.GA3984@erisian.com.au>
 <80140f82-daf5-09ea-42f6-c8bb1157a245@gmail.com>
 <20211009135939.GC4108@erisian.com.au>
Message-ID: <01324ff8-0e48-c460-62fd-a1da1c8ec6ec@gmail.com>

 > H( private-key, msg, other-party's-nonce-pair, 1 )

That should work. I had thought that other-party's-nonce-pair would be unique
unknown randomness, but I can see now that it can be rederived from RA(n) or
RB(n).

 > Hmm, you had me panicking that I'd been describing how to combine the
 > two despite having decided it wasn't necessary to combine them...

Ah, should have read that part more closely. The proposal uses the single sig
adaptor sig variant.