Rationale for verification with cofactor $2^c$ in EdDSA? Posted by fgrieu, at crypto.stackexchange.com, 21 Mar 2021 EdDSA for more curves describes two options of signature…