We know unlike
ecrecover, it is impossible to get to public key given schnorr signature = (r,s) since rG = sG-eP .
So, would like to understand what are the security risks,
if we say
and get to publicKey at the verification? something like this
P = (rG-sG)/e