Partial verification: We can not rely on R.y being odd if the nonce was flipped during signing. So we have to do all checks again in every case.
Partial verification: We can not rely on R.y being odd if the nonce was
flipped during signing. So we have to do all checks again in every case.

faircoin/faircoin2,faircoin/faircoin,faircoin/faircoin,faircoin/faircoin2,faircoin/faircoin,faircoin/faircoin,faircoin/faircoin,faircoin/faircoin,faircoin/faircoin2,faircoin/faircoin2,faircoin/faircoin2,faircoin/faircoin2