The Fiat-Shamir transform: how a hash function replaces a conversation

This post assumes you've read the Schnorr signatures post. You should be comfortable with s = k + ex, the verification equation sG = R + eP, and why nonce reuse is catastrophic. We're picking up exactly where that left off. 1. Schnorr as a conversa...