I think I've found the problem with what I propose at the top of this thread.

Alice can spend the same secret after sending it to Carol, by blinding the same secret in the conventional way and then spending it before Carol attempts to spend it

So that's why we need to stick with the two stages, both with P2PK

(I must admit I'm not sure I understand your response)

Reply to this note

Please Login to reply.

Discussion

I need to catch up quite a bit with my understanding of stage 2. I'll be sure to bring our older notes where you explained blinding/unbinding next time we meet 😀

Oh yes, this is the attack I meant.