P1 = s G = (r + h privKey) mod q G = r G + h privKey G = R + h * pubKey
The last step seems erroneous. The privKey is converted into pubKey without any obvious mathematical operation. Is that correct? If so, I think some additional steps would need to be there for clarity.
Under the "How does it work" section, it says:
The last step seems erroneous. The privKey is converted into pubKey without any obvious mathematical operation. Is that correct? If so, I think some additional steps would need to be there for clarity.
(PS thanks for writing this!)