For Schnoor signature aggregation, could you save the midstate for a tagged hash? Since it's hash(hash(tag)||hash(tag)||message)
You could save the midstate and just start with the message from that midstate.
Does this make sense?
nick (nprofile…6tvd) rot13maxi (nprofile…x2lg)