Oddbean new post about | logout
 Can someone please link me to an actual specification for anti-exfil

cc @matt 
 Any method of cooperatively building a nonce (eg stuff things do for FROST, it’s the same problem). 
 It’s also implemented in secp256k1-zkp. 
 The fact that no agreed on standard exists is baffling.

I will be writing my own standard.