Schnorr signature documentation typo
In the provided documentation, the steps to implement Nocturne's variant of Schnorr signatures over the Baby Jubjub curve are described as follows:
(derive the signing secret key from the spending key)
(extract 32 bytes of entropy from the spending key)
(sample another 32 random bytes)
("reduce" hash output into , using extra entropy from addition to the rng)
(the rest is a "standard" Schnorr signature)
The signature is the pair
In step 8, in the signature is generated using ; however, it should be generated using because the spending key is only used to derive the signing secret key.