We know unlike ecrecover
, it is impossible to get to public key given schnorr signature = (r,s) since rG = sG-eP .
So, would like to understand what are the security risks,
if we say
signature=F(r,s,e)
and get to publicKey at the verification? something like this
P = (rG-sG)/e
F()
?