-
@ waxwing
2025-03-12 11:46:09I must admit it's difficult to see scenarios where it's directly useful. But if we compare with ZKCP, this is a much less general idea in terms of proving construct, and shares the problem of requiring an interactive setup, but does have one advantage, which is that the utxo or sPK can be setup in advance, since the negotiation is on a signature not an sPK.