Seems oddly bait and switch given RFC6979 advises to use deterministic nonce (which secp256k1 has ecdsa support for and Coldcard Mk4 uses?) while folks are trying to redo nonce impl’s for Schnorr signing because DN https://github.com/randombit/botan/issues/2939 https://github.com/BlockstreamResearch/secp256k1-zkp/issues/172 https://github.com/bitcoin-core/secp256k1/pull/1140 Btw can also do deterministic build of Coldcard firmware and flash