--- Log opened Tue Nov 01 00:00:04 2022
14:55 -!- jesseposner [~jesse@user/jesseposner] has quit [Ping timeout: 272 seconds]
15:04 -!- jesseposner [~jesse@user/jesseposner] has joined #silentpayments
17:05 <@RubenSomsen>   1) I think x_scan can be derived from x_spend (x_scan = hash(x_spend)), since there's no situation where the person that knows x_spend doesn't also know x_scan.
17:06 <@RubenSomsen> 2) Yes, with the small caveat that the tag should be an ECC point (or tag*G)
17:08 <@RubenSomsen> 3) Both are possible but I personally think it's cleaner to only allow a two key scheme. Users can always opt out by setting both keys to the same key.
--- Log closed Wed Nov 02 00:00:06 2022