Oddbean new post about | logout
 Seems oddly bait and switch given RFC6979 advises to use deterministic nonce (which secp256k1 has ecdsa support for and Coldcard Mk4 uses?) while folks are  trying to redo nonce impl’s for Schnorr signing because DN

https://github.com/randombit/botan/issues/2939

https://github.com/BlockstreamResearch/secp256k1-zkp/issues/172

https://github.com/bitcoin-core/secp256k1/pull/1140

Btw can also do deterministic build of Coldcard firmware and flash