I've rewritten the second half of this substantially, since it had several non-trivial errors; sorry for anyone who got that far 😄. I think it makes considerably more sense now ...
New blog post
https://reyify.com/blog/adaptors-generalised/
... been thinking a lot about this topic, on and off. Not sure about potential applications to onchain verification of ZKPs, but *any* ability to lock bitcoin state transitions/payments to proofs of statements that are not restricted to a single generator G, feels like it could lead to some important new protocols. But this being interactive is clearly not as good.
Discussion
No replies yet.