We currently use EdDSA, yet with custom signing code. There's no reason not to move to Schnorr (except for its lack of deterministic nonces which is solved by RFC6979), yet doing so would enable key recovery from a message and signature, which can have use. While I can't think of any in-relation to Meros off the top of my head, I think it's worth it to include.
kayabaNerve
commented
2 years ago
We currently use EdDSA, yet with custom signing code. There's no reason not to move to Schnorr (except for its lack of deterministic nonces which is solved by RFC6979), yet doing so would enable key recovery from a message and signature, which can have use. While I can't think of any in-relation to Meros off the top of my head, I think it's worth it to include.