Yes, just one is needed and this is an optimization. The signer does not require every individual R1 value as input, only the R2 values. This is different to MuSig2, where both R1 and R2 can be aggregated by the coordinator.
-- You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/71efbf8d-9251-492e-a98f-11b128af4214%40gmail.com.
