The function computes initial prover's commitment to randomness ("a" message of the sigma-protocol, which in this case has two parts "a" and "b") based on the verifier's challenge ("e") and prover's response ("z")
The function computes initial prover's commitment to randomness ("a" message of the sigma-protocol, which in this case has two parts "a" and "b") based on the verifier's challenge ("e") and prover's response ("z")
gz = a*ue, hz = b*ve => a = gz/ue, b = hz/ve