0 sats \ 0 replies \ @VzxPLnHqr 22 Nov 2023 freebie \ parent \ on: A Provably Fair Off-Chain Lottery (and DLC) Protocol bitcoin
I added a test demonstrating 1 of n oblivious signing. It does not quite solve the problem you point out, but it gets closer (notice how Alice can privately shuffle the messages and yet Bob still receives one and only one valid signature, while Alice still remains oblivious as to which one he receives).