1
→
→
→
→
sk.prove(alpha)
proof.verify(publicKey, alpha)
?
2
3
Gamma | c | s
4
+
+
↓
↓
—
+
↓
↓
—
→
⊣
sk 4ccd08…a6fb msg 0x72
nonce 0x0000…0000
—
sk 4ccd08…a6fb alpha 0x72
nonce 0x0000…0000
🔒
—
→
→
SHA-512
🔒
SIMD-0512
0
CU
0
→
→
1
alpha
sk.prove(alpha)
→
2
proof.verify(publicKey, alpha)
?
?
—
—
—
1
▼
1
2
3