Can someone please link me to an actual specification for anti-exfil cc @matt
Any method of cooperatively building a nonce (eg stuff things do for FROST, it’s the same problem).
It’s also implemented in secp256k1-zkp.
The fact that no agreed on standard exists is baffling. I will be writing my own standard.