#slide(title: "ECDSA: corectness proof")[
#line-by-line()[
+ $С = u_1 times G + u_2 times Q$
+ $С = u_1 times G + u_2 d times G$
+ $С = (u_1 + u_2 d) times G$
+ $С = (z s^(-1) + r s^(-1) d) times G$
+ $С = (z + r d)s^(-1) times G$
+ $С = (z + r d) k/(z + r d) times G$
+ $С = k times G = (x_2, y_2)$
]
]
is rendered to: