Schnorr Blind Signature support?

[Kelbie]

Is there any support or planned support of Schnorr Blind Signatures?

[omershlo]

Good idea,
do you have a specific protocol ?

[Kelbie]

I am working on implementing the Statechains protocol which requires Blind Schnorr so it would have to be compatible with bip-schnorr.

This thread may be of interest to anyone implementing the blinding. Edit: turns out the way they did it in Wasabi was not compatible with bip-schnorr.

[Kelbie]

Relevant thread on StackExchange about implementing blind schnorr that is compatible with bip-schnorr. Note that Greg Maxwell said that this implementation is insecure.

[omershlo]

thanks.
I asked in the telegram group if someone wants to take this issue. let's see/
And - if Greg Maxwell says its insecure : it's insecure :)

[burdges]

There is an easy fix to the Wagner attacks in https://eprint.iacr.org/2019/877.pdf but not sure if/when adaptor signatures are secure, and I'm not sure when schnorr blind signatures really make sense.