3 ms·
There is nothing more challenging about schnorr signatures themselves, but 100% of the lauded "advanced" things that can be done with a schnorr signature over E
by nullc 6y ago
There is nothing more challenging about schnorr signatures themselves, but 100% of the lauded "advanced" things that can be done with a schnorr signature over ECDSA-- such as threshold signatures-- as substantially more complicated and error prone.
Until recently (or still) pretty much none of them had production usable implementations anywhere for any application, and most academic coverage has mostly been a glib "trivially you can do that"-- ignoring that naive "obvious" implementations end up being completely insecure.