Parameterize signature schemes
Closed, ResolvedPublic


At present, a RelayOffer includes a SEQUENCE OF SignatureScheme, but since SignatureScheme is enumerated, and there's only one experimental alternative, there is no way to distinguish between experiments. If SignatureScheme was a choice type, the experimental alternative could have a parameter that could be used to indicate which experiment it referred to.

The ristretto255-shake256 scheme (and, quite probably, any future alternatives) would use a null parameter, which wouldn't take up any extra space in the encoded form.