sigmastate.basics.DLogProtocol
The function computes initial prover's commitment to randomness ("a" message of the sigma-protocol) based on the verifier's challenge ("e") and prover's response ("z")
The function computes initial prover's commitment to randomness ("a" message of the sigma-protocol) based on the verifier's challenge ("e") and prover's response ("z")
gz = a*he => a = gz/he