prevention of PK recovery with two signatures on the same message

[skaunov]

          I totally trust you, just trying to understand.

Deterministic as "to know c beforehand of signing"; or is it just the fact that V2 wouldn't work since it lacks the point $r$ value? Or something else?

I mean I kind of don't see yet the essential difference if signer adds to the message point $r$ instead of the info/data you mentioned. 🤔

Originally posted by @skaunov in #98 (comment)

[skaunov]

Ah, I guess I got that. Signer must be not able to produce two different signatures on the same message with the same key. ❔