Documentation

Order of the curve

Generator of the curve

H = aG where a is not known

Generate vector of generators in a deterministic way from the curve generator g by applying H(encode(g) || i) where H is a secure hash function

Generate vector of generators in a deterministic way from the curve generator h by applying H(encode(h) || i) where H is a secure hash function

A random oracle. In the Fiat-Shamir heuristic, its input is specifically the transcript of the interaction up to that point.