swap ordering of a and c in TupleProof to match normal Schnorr usage

Trust-Machines · Oct 10, 2024 · 64dd754 · 64dd754
1 parent 9658791
commit 64dd754
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/common.rs b/src/common.rs
@@ -284,7 +284,7 @@ pub struct TupleProof {
     pub R: Point,
     /// rB = r*B = b*R
     pub rB: Point,
-    /// z = r + a*c where c = H(G,A,B,K,R) as per Fiat-Shamir
+    /// z = r + c*a where c = H(G,A,B,K,R) as per Fiat-Shamir
     pub z: Scalar,
 }
 
@@ -305,7 +305,7 @@ impl TupleProof {
         Self {
             R,
             rB: r * B,
-            z: r + a * c,
+            z: r + c * a,
         }
     }