Zero-Knowledge Goof on Nostr: You still need the ZKP to prove the pre-images of some set of have some valid ...

You still need the ZKP to prove the pre-images of some set of have some valid representation. I am referring the step where you have `n` points whose pre-images you want to sell in a single transaction. I am just saying you don't need n outputs to sell n DLOGs. You can set up an access structure ahead of time such that anyone who knows the discrete log of `X` will learn the discrete log of `X_1`, `X_2`,... , `X_n`. e.g set a polynomial such that p(1) = x_1, p(2) = x_2, ..., p(n) = x_n, then send p(n+1), p(n +2), ... p(2n -1) to the purchaser (they verify they are correct by interpolating X_1, X_2,..., X_n). Then sell them a single DLOG p(2n). From it they can interpolate the polynomial and recover x_1, ... ,x_n. You don't need to do any VSS here.

This is sort of the idea of "packed" secret sharing from the literature. If all the secrets are uniformly sampled and independently random then that *should* be secure protocol under DLOG assumption. Might need some more thought if that's not the case.