diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4a7b162..a3b152d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,10 @@
 # Changelog
 
-## 0.4.0-pre.2 (April 5, 2022)
+## 0.4.0-pre.3 (July 1, 2022)
+* Updated to be in sync with draft-irtf-cfrg-voprf-10, with
+  the only difference from -09 being a constant string change
+
+## 0.4.0-pre.2 (April 21, 2022)
 * Exposes the derive_key function under the "danger" feature
 
 ## 0.4.0-pre.1 (April 1, 2022)
diff --git a/Cargo.toml b/Cargo.toml
index 84b8c0f..49f86f1 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -9,7 +9,7 @@ name = "voprf"
 readme = "README.md"
 repository = "https://github.com/novifinancial/voprf/"
 rust-version = "1.57"
-version = "0.4.0-pre.2"
+version = "0.4.0-pre.3"
 
 [features]
 alloc = []
@@ -30,7 +30,7 @@ curve25519-dalek = { version = "=4.0.0-pre.1", default-features = false, optiona
 derive-where = { version = "=1.0.0-rc.3", features = ["zeroize-on-drop"] }
 digest = "0.10"
 displaydoc = { version = "0.2", default-features = false }
-elliptic-curve = { version = "=0.12.0-pre.1", features = [
+elliptic-curve = { version = "0.12", features = [
   "hash2curve",
   "sec1",
   "voprf",
@@ -48,7 +48,7 @@ zeroize = { version = "1.5", default-features = false }
 generic-array = { version = "0.14", features = ["more_lengths"] }
 hex = "0.4"
 json = "0.12"
-p256 = { version = "=0.11.0-pre.0", default-features = false, features = [
+p256 = { version = "0.11", default-features = false, features = [
   "hash2curve",
   "voprf",
 ] }
diff --git a/README.md b/README.md
index f2b565b..b9a86a0 100644
--- a/README.md
+++ b/README.md
@@ -16,7 +16,7 @@ Installation
 Add the following line to the dependencies of your `Cargo.toml`:
 
 ```
-voprf = "0.4.0-pre.2"
+voprf = "0.4.0-pre.3"
 ```
 
 ### Minimum Supported Rust Version
diff --git a/src/common.rs b/src/common.rs
index 88000f4..214be01 100644
--- a/src/common.rs
+++ b/src/common.rs
@@ -33,7 +33,7 @@ pub(crate) const STR_DERIVE_KEYPAIR: [u8; 13] = *b"DeriveKeyPair";
 pub(crate) const STR_COMPOSITE: [u8; 9] = *b"Composite";
 pub(crate) const STR_CHALLENGE: [u8; 9] = *b"Challenge";
 pub(crate) const STR_INFO: [u8; 4] = *b"Info";
-pub(crate) const STR_VOPRF: [u8; 8] = *b"VOPRF09-";
+pub(crate) const STR_VOPRF: [u8; 8] = *b"VOPRF10-";
 pub(crate) const STR_HASH_TO_SCALAR: [u8; 13] = *b"HashToScalar-";
 pub(crate) const STR_HASH_TO_GROUP: [u8; 12] = *b"HashToGroup-";
 
@@ -153,7 +153,7 @@ where
     <CS::Hash as OutputSizeUser>::OutputSize:
         IsLess<U256> + IsLessOrEqual<<CS::Hash as BlockSizeUser>::BlockSize>,
 {
-    // https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-09.html#section-2.2.1
+    // https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-10.html#section-2.2.1
 
     let (m, z) = compute_composites::<CS, _, _>(Some(k), b, cs, ds, mode)?;
 
@@ -216,7 +216,7 @@ where
     <CS::Hash as OutputSizeUser>::OutputSize:
         IsLess<U256> + IsLessOrEqual<<CS::Hash as BlockSizeUser>::BlockSize>,
 {
-    // https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-09.html#section-2.2.2
+    // https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-10.html#section-2.2.2
     let (m, z) = compute_composites::<CS, _, _>(None, b, cs, ds, mode)?;
     let t2 = (a * &proof.s_scalar) + &(b * &proof.c_scalar);
     let t3 = (m * &proof.s_scalar) + &(z * &proof.c_scalar);
@@ -285,7 +285,7 @@ where
     <CS::Hash as OutputSizeUser>::OutputSize:
         IsLess<U256> + IsLessOrEqual<<CS::Hash as BlockSizeUser>::BlockSize>,
 {
-    // https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-09.html#section-2.2.1
+    // https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-10.html#section-2.2.1
 
     let elem_len = <CS::Group as Group>::ElemLen::U16.to_be_bytes();
 
diff --git a/src/lib.rs b/src/lib.rs
index 4fbb998..6d53fee 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -8,7 +8,7 @@
 //! An implementation of a verifiable oblivious pseudorandom function (VOPRF)
 //!
 //! Note: This implementation is in sync with
-//! [draft-irtf-cfrg-voprf-09](https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-09.html),
+//! [draft-irtf-cfrg-voprf-10](https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-10.html),
 //! but this specification is subject to change, until the final version
 //! published by the IETF.
 //!
@@ -430,7 +430,7 @@
 //! The API for POPRF mode is similar to VOPRF mode, except that a [PoprfServer]
 //! and [PoprfClient] are used, and that each of the functions accept an
 //! additional (and optional) info parameter which represents the public input.
-//! See <https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-09.html#name-poprf-public-input>
+//! See <https://www.ietf.org/archive/id/draft-irtf-cfrg-voprf-10.html#name-poprf-public-input>
 //! for more detailed information on how this public input should be used.
 //!
 //! # Features
diff --git a/src/tests/cfrg_vectors.rs b/src/tests/cfrg_vectors.rs
index 81fc07b..b7c26df 100644
--- a/src/tests/cfrg_vectors.rs
+++ b/src/tests/cfrg_vectors.rs
@@ -17,37 +17,37 @@ pub(crate) const VECTORS: &str = r#"
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3
 KeyInfo = 74657374206b6579
-skSm = 8ce0798c296bdeb665d52312d81a596dbb4ef0d25adb10c7f2b58c72dd2e5
-40a
+skSm = e617ae6f2d10de61e16cab73023c5a2df74335d13f89470957214664468d2
+e0b
 ~~~
 
 #### Test Vector 1, Batch Size 1
 
 ~~~
 Input = 00
-Blind = c604c785ada70d77a5256ae21767de8c3304115237d262134f5e46e512cf
-8e03
-BlindedElement = 8453ce4f98478a73faf24dd0c2e81d9a5e399171d2687cc258b
-9e593623bde4d
-EvaluationElement = 22bcfc0930ecddf4ada3f0cb421c8d6669576fc4fbbe24e1
-8c94d0f36e767466
-Output = 2765a7f9fa7e9d5440bbf1262dc1041277bed5f27fd27ee89662192a408
-508bb8711559d5a5390560065b83b946ed7b433d0c1df09bd23871804ae78e4a4d21
-5
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
+6706
+BlindedElement = c83d0d8a3e80be2ced8bf35c5f3e24d42260ca8fa9a0403ca83
+033588c26614d
+EvaluationElement = b29ca44d6dfafc77a50b72abc53cfb7abcbe9cf6714afc76
+893ee8dcaf053b59
+Output = 8a19c9b8f4459d541ebbfff4e29f36620e44e825a27b0f2e3a3c0d8e963
+588ee04348312dc8b43a48c41d4e7d904f95c91813a6b4f624392433f0568409da62
+8
 ~~~
 
 #### Test Vector 2, Batch Size 1
 
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = 5ed895206bfc53316d307b23e46ecc6623afb3086da74189a416012be037
-e50b
-BlindedElement = 86ef8baa01dd6cc34a067d2fc56cde51498a54cb0c30f63f083
-53d912164d711
-EvaluationElement = a27d5e498927ca96e493373a04e263115c31b918411df0ce
-d382db4e66388766
-Output = 3d6c9ec7dd6f51b987b46b79128d98323accd7c1561faa50d287c5285ec
-da1e660f3ee2929aebd431a7a7d511767cbd1054735a6e19aee1b9423a1e6f479535
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
+6706
+BlindedElement = 8673ffd2f26b2579922fc485c77e106def00982e0abb233b4c6
+e54841d43ba29
+EvaluationElement = 68ed7037846f48a1b4073a0d110f6e4de8f53ab845365c0f
+3d7f1b67caa39126
+Output = bcdbd421c0863495d63d81a868858f34f5215437c5777072a92703f36b3
+6c4a2d3e7e54a5762e70b06223527c211e2d4364481270f72971a2db8b7ab8fad84e
 e
 ~~~
 
@@ -57,71 +57,71 @@ e
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3
 KeyInfo = 74657374206b6579
-skSm = 24d1aca670a768b99e888c19f9ee3252d17e32689507b2b9b803ae23b1997
-f07
-pkSm = 46919d396c12fbb7a02f4ce8f51a9941ddc1c4335682e1b03b0ca5b3524c6
-619
+skSm = a3b8dea4a99be2469da7f7d2d93fe5f2867317d6705350475d47739c7214d
+a07
+pkSm = c00fbee6832a8e5d6cc1d1a23315daf6a6018f19e29ba37b05499259da854
+b48
 ~~~
 
 #### Test Vector 1, Batch Size 1
 
 ~~~
 Input = 00
-Blind = ed8366feb6b1d05d1f46acb727061e43aadfafe9c10e5a64e7518d63e326
-3503
-BlindedElement = 444550ea064013c569fe63567eb93e7a9496902a573ea1e6654
-76fd39d5edc40
-EvaluationElement = 7af7a45e4f1e0c6d410d41704e16d980ebff051fd0975fce
-cd17f79a6b57a473
-Proof = 26982a26b2aa20f1e449be5a858c59d7992f7f4a13b007e3980f5c36e8ae
-a7014268883db3094e08e3f493b3d23bae87ac098a33e775172c1027f1b5d025ca08
-ProofRandomScalar = 019cbd1d7420292528f8cdd62f339fdabb602f04a95dac9d
-bcec831b8c681a09
-Output = 453a358544b4e92bbc4625d08ffdde64c0dbc4f9b1501d548e3a6d8094b
-a70a993c13a6e65a46880bbd65272ba54cf199577760815098e5e10cb951b1fc5b02
-7
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
+6706
+BlindedElement = 6cce2c7913f4c8c0ac44ec149a1544b0e711e1630753d4efc7c
+5fe36a4d50638
+EvaluationElement = 826f2f3e553a039bcd69c9df6cb166e7943fd207089ae704
+1f6041322ce7033a
+Proof = 2e541a6962e783d2f42d5f4fb1364e51c368e95e83a962614714e9dfe21a
+720cd8c8eb8106131b4a758b5a0987d3870adb348f5eae7b4a2bc26735928cc4b90c
+ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98
+81aa6f61d645fc0e
+Output = 4d5dd83db5bfd850e3e0c17519f1013aab904e7b131dc1ded31f7a76aac
+f040f6b344b0e635cf6df30771a35157e0e3d9539f7a891b48cd8521692b15c51538
+d
 ~~~
 
 #### Test Vector 2, Batch Size 1
 
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = e6d0f1d89ad552e383d6c6f4e8598cc3037d6e274d22da3089e7afbd4171
-ea02
-BlindedElement = 82d9fc20daf67106ae2d2c584c615d103dafda653ac5b2b2c6f
-aafc06e3f1c0a
-EvaluationElement = 60c468920f4f949be9aaaf9b4fb27dc7bc89daca4a3aaa31
-e96efae56c02ac75
-Proof = 4a7490fd0a9e13cc66bcdeded002899a3e206364d9bdbaf9998a73dd728c
-8602a6967f81a4948e6de797d638ee02ca44d933d05f2715fa1618b6a3324f3b2608
-ProofRandomScalar = 74ae06fd50d5f26c2519bd7b184f45dd3ef2cb50197d42df
-9d013f7d6c312a0b
-Output = a2bacfc82a4cac041edab1e1c0d0dc63f46631fb4886f8c395f0b184a9b
-7cbbef2eee05bbd3f085552d8c80e77711b2ad9ba2b7574e2531591380e717d29c6f
-5
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
+6706
+BlindedElement = 6a4e632b76a2cfcb0295ee74098a15a3e858f6006fd9fa8576a
+5813e051ac134
+EvaluationElement = 2cb879d933a1af46c77e89f3f39a38f80347bf4716da3dc3
+07c8aa1282179823
+Proof = eabae3489c46b9e9a8da0cc921d2bc2960ef5fb0b38c8f067cc5c21f62f4
+eb0ff5472009aec126f543b6051b5d62ccbf2625aab6684076c26cfdf0904257090c
+ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98
+81aa6f61d645fc0e
+Output = 5c3fe06ef39905710a124df0727c6c938f48234b35ccc4548c0736d7f6f
+36e6b7333a9aefc93d6b1ee20151a40bce453866b62cf5d41799982fee6100680915
+9
 ~~~
 
 #### Test Vector 3, Batch Size 2
 
 ~~~
 Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = 80513e77795feeec6d2c450589b0e1b178febd5c193a9fcba0d27f0a06e0
-d50f,533c2e6d91c934f919ac218973be55ba0d7b234160a0d4cf3bddafbda99e2e0
-c
-BlindedElement = 70a6ac589da4cfff4a1135c21e438a50935317ad6900810a59e
-76c2c28d8e562,5ed4710468c94e6c0181aef8276204ec6aef509f5cf1d7d6184693
-1481d23d76
-EvaluationElement = 5ef7bc4c54aa5fccb4328fd725d3c20130ebe3ced54f28b6
-e6c4591815158059,0ce1a236be8dba445cf57ddddec8f1c2d9be2c164add431fc18
-e3279be968c2d
-Proof = 53afba40c6c27636a0694def258728f192d25ec5f97ee1e87a408fd20615
-6107d3b82b618242f10ff459d7d30d0a68d9e381254d2e5f6bc82671f093f47c0e01
-ProofRandomScalar = 3af5aec325791592eee4a8860522f8444c8e71ac33af5186
-a9706137886dce08
-Output = 453a358544b4e92bbc4625d08ffdde64c0dbc4f9b1501d548e3a6d8094b
-a70a993c13a6e65a46880bbd65272ba54cf199577760815098e5e10cb951b1fc5b02
-7,a2bacfc82a4cac041edab1e1c0d0dc63f46631fb4886f8c395f0b184a9b7cbbef2
-eee05bbd3f085552d8c80e77711b2ad9ba2b7574e2531591380e717d29c6f5
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
+6706,222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d9881aa6f61d645fc0
+e
+BlindedElement = 6cce2c7913f4c8c0ac44ec149a1544b0e711e1630753d4efc7c
+5fe36a4d50638,aa9908e4c40b7fe5f091cf0f7fb8ec75ffdaaf2d19512b7b9939f0
+ffaaa0654f
+EvaluationElement = 826f2f3e553a039bcd69c9df6cb166e7943fd207089ae704
+1f6041322ce7033a,902ef95488cc3c47fe569bc96c922a4ae3f9ebd8ccbc71bfefa
+5f1e7da9ab953
+Proof = d9bfee92cd7496cdf469947b534549ceb79ebd7b5695d20437b3e14758cf
+de0998eaa13a480cc35b562cbfb1412b1677650cd901b5fb4d6805581a95b440320f
+ProofRandomScalar = 419c4f4f5052c53c45f3da494d2b67b220d02118e0857cdb
+cf037f9ea84bbe0c
+Output = 4d5dd83db5bfd850e3e0c17519f1013aab904e7b131dc1ded31f7a76aac
+f040f6b344b0e635cf6df30771a35157e0e3d9539f7a891b48cd8521692b15c51538
+d,5c3fe06ef39905710a124df0727c6c938f48234b35ccc4548c0736d7f6f36e6b73
+33a9aefc93d6b1ee20151a40bce453866b62cf5d41799982fee61006809159
 ~~~
 
 ### POPRF Mode
@@ -130,10 +130,10 @@ eee05bbd3f085552d8c80e77711b2ad9ba2b7574e2531591380e717d29c6f5
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3
 KeyInfo = 74657374206b6579
-skSm = 02c1b949c3d65f83b18890aa8d099f6063fa6a72add8d776bc15a291fd08f
-f04
-pkSm = 1a2fac6b919790c613e0fbed070471778fbb1c6950d40a4e059acb652dc57
-161
+skSm = 024eaeb72e5b3729d7f19d90aa44e3d2f4c445fb29011ffd755655636f2b1
+00a
+pkSm = e001954ccd18ec5aa89bcbf26c03d84dc4d9c9b973d9f06b1e0ceb7b79f41
+d65
 ~~~
 
 #### Test Vector 1, Batch Size 1
@@ -141,19 +141,19 @@ pkSm = 1a2fac6b919790c613e0fbed070471778fbb1c6950d40a4e059acb652dc57
 ~~~
 Input = 00
 Info = 7465737420696e666f
-Blind = 7e5bcbf82a46109ee0d24e9bcab41fc830a6ce8b82fc1e9213a043b743b9
-5800
-BlindedElement = da01485047605a666542d0599ef2fbeed0c2e45a97c6e3d420f
-832918e09f535
-EvaluationElement = 3015fc16fe179bdb9054da5297c77d1f249dabf32e4fdcc4
-937d6ba5e99d7b53
-Proof = f10470180fc884a2f51472eddde9ad9a4080b00e13f63c130cece83b93ca
-500f956b08e35ed2670ca504c704e0b74687451f5985627c93e2290a5da0dffc1d0b
-ProofRandomScalar = 080d0a4d352de92672ab709b1ae1888cb48dfabc2d6ca5b9
-14b335512fe70508
-Output = 4d04eccb77a29bd8a00fb1e3f391e0601340c3dc874fc7bb16cfd92d961
-532d18b4edfffaec94457cb19111bca1ecd19e46124c6a5d29703d09df5e5ab521b2
-8
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
+6706
+BlindedElement = 009ffa1ffc529e4f1d3d8de1c06d22fbb15e39920a72ad4efed
+6c39af9438a2d
+EvaluationElement = aa9af25bf4edead5e2e0a4b8f93db9b497017f93cf68c750
+45f02172bfc5d304
+Proof = bb893ccce54685a871185bb056cb5e0594d09d3b53f2f879de06a650b8ae
+ff08371f2ff9f3d5cac7f393cc37b2c71c2a6fbb80f35fe36b8e5cbddf11469c8e03
+ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98
+81aa6f61d645fc0e
+Output = e7ed59e3f808c369598961ebfd9af74272894e0904d1c11653a21b08204
+dba1a5fb5c3dd6be6c419190a84b576d91eb3d8d920d450fee0427fd24524950d72d
+6
 ~~~
 
 #### Test Vector 2, Batch Size 1
@@ -161,19 +161,19 @@ Output = 4d04eccb77a29bd8a00fb1e3f391e0601340c3dc874fc7bb16cfd92d961
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
 Info = 7465737420696e666f
-Blind = de2e98f422bf7b99be19f7da7cac62f1599d35a225ec6340149a0aaff310
-2003
-BlindedElement = 909f8d2d517fa2235f8b35f91220636732541d9f3e309c6988d
-6d8c987e5a357
-EvaluationElement = 241786b8f9da3e8c28d75dc23b5f8b251ec150ccb453efa7
-12f6e9b72e763a0a
-Proof = a3748b980aec81add561bcd7ac4fe2b09a93bd8a127991788fd618bf7fb7
-93034a6f7f59cdcab538ed3e50d74b31f82dff14e3c8d3a081f744a6bdf93526ed0e
-ProofRandomScalar = c4d002aa4cfcf281657cf36fe562bc60d9133e0e72a74432
-f685b2b6a4b42a0c
-Output = a88ab2bceba2c9c5a0ee0ee45636e65042b5f274af864f8c1560d32ecee
-4373c31907f237609d3f164beec32e3270588961c1d19cee467d2a3b0445ebdea215
-9
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
+6706
+BlindedElement = 5e009e08e228f95ee3703cff60a1d54225bb282bdb6d7dc9a78
+e287f8418315a
+EvaluationElement = 2e528236481eb6d87b07ef5f8c17910323d04b3bf0cb2f2d
+23d5a7ad9f069b22
+Proof = 3796381ab287189839288bbaffc971eb87c3a28226fa99dc83b363adb2f4
+b20e4ae81fb675ebcd43d13918f71846cb488d0ce7d473bfca68450a5a5472564500
+ProofRandomScalar = 222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d98
+81aa6f61d645fc0e
+Output = 9a0d8c55e2fef4bada9fb5877a0e739496e539a0d835722911dab9ec112
+397e763a605acbc072619e8b8acefb8ee704a357556edc802648089d684baa763ce1
+4
 ~~~
 
 #### Test Vector 3, Batch Size 2
@@ -181,23 +181,23 @@ Output = a88ab2bceba2c9c5a0ee0ee45636e65042b5f274af864f8c1560d32ecee
 ~~~
 Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
 Info = 7465737420696e666f
-Blind = e79a642b20f4c9118febffaf6b6a31471fe7794aa77ced123f07e56cb8cf
-7c01,0bb106c0e1aac79e92dd2d051e90efe4e2e093bc1e82b80e8cce6afa4f51980
-2
-BlindedElement = 3206271954cce85425971fddfebe14acad819b9753ffc171815
-7e54a5e56542f,847b21e32855892256a3eee10ea5c512d362b34de1ab278573cf91
-edfcb14a03
-EvaluationElement = 76d3282ac9aabc9b0133df89e680ab0d43f2946c224db25e
-798abdf0ed1d255a,e8483fbacb3e62787a803dd6d688e4db26be5392f529f1dd6a7
-f06e2b28dc52c
-Proof = f5b8d39897f12dd1f8fc927e2f7f563629b7b45f1e6b5eeb469c043d2143
-7907a0e9236beec240a04e0fb906a7d126a8cb40e22730106446c1fa3a40a5283406
-ProofRandomScalar = 668b3aab5207735beb86c5379228da260159dc24f7c5c248
-3a81aff8fbffcc0d
-Output = 4d04eccb77a29bd8a00fb1e3f391e0601340c3dc874fc7bb16cfd92d961
-532d18b4edfffaec94457cb19111bca1ecd19e46124c6a5d29703d09df5e5ab521b2
-8,a88ab2bceba2c9c5a0ee0ee45636e65042b5f274af864f8c1560d32ecee4373c31
-907f237609d3f164beec32e3270588961c1d19cee467d2a3b0445ebdea2159
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec4c1f
+6706,222a5e897cf59db8145db8d16e597e8facb80ae7d4e26d9881aa6f61d645fc0
+e
+BlindedElement = 009ffa1ffc529e4f1d3d8de1c06d22fbb15e39920a72ad4efed
+6c39af9438a2d,1ee64b9e5148987ca6647ccddc11ef506231e986d5ce08ef9b8230
+871f840b3a
+EvaluationElement = aa9af25bf4edead5e2e0a4b8f93db9b497017f93cf68c750
+45f02172bfc5d304,3073794fd68f64432b4d1f24752c4398f0e81e00b5b5842e463
+5dd381331091b
+Proof = 7d59db67715a9030d46ab50a614fb55927961c8d9322cb6973ef36775309
+810b9f4a670ba4b9321f5cf753be2a58dee0730cfabd12b8f25a8a342e158ae2b608
+ProofRandomScalar = 419c4f4f5052c53c45f3da494d2b67b220d02118e0857cdb
+cf037f9ea84bbe0c
+Output = e7ed59e3f808c369598961ebfd9af74272894e0904d1c11653a21b08204
+dba1a5fb5c3dd6be6c419190a84b576d91eb3d8d920d450fee0427fd24524950d72d
+6,9a0d8c55e2fef4bada9fb5877a0e739496e539a0d835722911dab9ec112397e763
+a605acbc072619e8b8acefb8ee704a357556edc802648089d684baa763ce14
 ~~~
 
 ## OPRF(decaf448, SHAKE-256)
@@ -208,38 +208,38 @@ Output = 4d04eccb77a29bd8a00fb1e3f391e0601340c3dc874fc7bb16cfd92d961
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
 KeyInfo = 74657374206b6579
-skSm = 416f3b0f4d13ac19e6aacade4ecf8b7e9c55d808311be2bea0dae4f4c56d0
-73e7229b8b72a8c7eb68bd2e98336baaec1ac47c82cf2c5e33b
+skSm = 30f71e5b5be9c91dd54c5a48e82be8d47eeb2cb2c45d7874a45dddc85af8d
+3f95b1ce73a99c47edc26ac9ddd936bd9b6b73728995bf1d213
 ~~~
 
 #### Test Vector 1, Batch Size 1
 
 ~~~
 Input = 00
-Blind = d62851d4bc07947c858dc735e9e22aaf0576f161ab555182908dbd7947b1
-c988956fa73b17b373b72fd4e3c0264a26aa4cab20fd6193b933
-BlindedElement = d078a185d2d8a54b68d6df4e83640192d3659e18fec68d43e48
-02998d3c9fd819b32070caa78083c909d68daeb7fd420a73f931452a2b70d
-EvaluationElement = 3452e46b6277b032627a7e5d22aa1b25459f8de90dda3137
-9ed490bb0078eeec05fc4265fafbb5252d4228f9f1f5453bbd391d6b8589f232
-Output = b93d3ed18489c1236cc965d202254de35767ea673560d6c225cec0b30fe
-3adc88fee63f8a78d127cd64c7077e1d3ac4a7cc761335c0bcdc12d6981ad8730285
-8
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
+3833a26e9388336361686ff1f83df55046504dfecad8549ba112
+BlindedElement = a4205d2af0410dccbd4464629ba1b835456d04d994cf93988cf
+2c3b9d45d3c4671c7625f52c66c760a069e2c3c367826debb13da089d735c
+EvaluationElement = e8d78cf5212fddf940f9f6fe02250ed83cc0595e3f0e7481
+1cdb9f62c0fa7fea94c45795637dc5c3ac31ee1cff18d0d675396ae09b302f76
+Output = 1c1a9df7d0616e0f5fdfb6479acec73a4f5562da8f9488f3b6112ef11c6
+7c5900e0abc3a169486ac7230a306c8796562a045c66305ed7cb2a3fae658e45eae4
+c
 ~~~
 
 #### Test Vector 2, Batch Size 1
 
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = ac345e8d755997956ddd1f267a2d86175aeae5e1168932285a6f602b4b20
-a570a697452b3ddbb7d0e29363adebbcb5673294396b82931f37
-BlindedElement = 283f0fab2be6ac3a3c8eacfd504f3ef63f518892f7b000f1dcc
-1ca2e773aba0fbee48b100886b90d5a08377cbf5ccf69801ae2c23e1adbf2
-EvaluationElement = ae30bab51a34c45a76d00034b29e1c5346fbe3718c386302
-8e47226456880a85a2e5118f274a8c260dae62fcec3cde8624405fc7cddbc867
-Output = aaf99e5a044bbce915bf3ba381e25da62e4b2cea4cee2f47f3662940284
-579c0f8e1e011062ba010ca4f2c67a8157481c9ae7a458ea035a89e1948bfc5b8323
-b
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
+3833a26e9388336361686ff1f83df55046504dfecad8549ba112
+BlindedElement = ec5b609e5d3c0bb024c35256194694ea6e42aa24d13cf6b0597
+49cb36911ccba0923cb73136acdf4bcecf23b6025f7b9b93d2eb0c09d964d
+EvaluationElement = 524c3a644e381b4ae416724247f94b996f655167e0d4e1ba
+d93cbc731c3beb36e3822e9dcbdc3600966226387a2306ba70eb68db5a64f92f
+Output = 95f519e8ff2b54d8d596da2c54829ae3dd900f5c18eef48efa03ef6694c
+505bea17b7982246c862d081b9fdcf295debc60abec8b0ddbfdf48bd302a3fe61b21
+e
 ~~~
 
 ### VOPRF Mode
@@ -248,80 +248,80 @@ b
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
 KeyInfo = 74657374206b6579
-skSm = 167e36766c08353fbc8fc46d89619f0306603a8ed33f7eafcca998ed2e890
-d15f64a22b0196aaa298e4a502275d4ced5c6131de64597c500
-pkSm = f27f3a898855240ef102d7bd6795aab2fa3972db3d47005cbd33e721cbed5
-a3fd37508d093ecc645fa80a7f928c4313cfbd4654e8ea7de8f
+skSm = 44c46e78aa6386cee57a46c75d124b13ced3e5f055caa3baaad61501330a4
+24463400453c97245a8f7b4c65f2c4c3dabd09a049c034f9e20
+pkSm = 78f4233110896fd41531fce182094c3bc4cf65f97b23078476b3b68118736
+617172d3735c5832081864e7c75cd3ddb449e93068b34ba863e
 ~~~
 
 #### Test Vector 1, Batch Size 1
 
 ~~~
 Input = 00
-Blind = 4bdfc97a75132d92a1da241baff84fada3e7b12d5b712efcac9ba734d54c
-2b24bff0ef6310404b5c05d60d7c258cea6500229ee015149f0f
-BlindedElement = 1ceb0a3432ac6b583c31fa70b7c17ac86e0aa425e0593d04b58
-021670f725eee6664e6cd2041d90f157bc213a2aa4ed7929630b2d9898a76
-EvaluationElement = 3afaa02425294a4810766c68e9e4c3c507b109b9064ed56a
-148a419371d5fb158f6ab5f0da62a6ba915bbe431097f5c71854821c1f10889d
-Proof = f02f7ab2722508e343b5692078556e7ca9b2d63bf83dff902150b867775b
-f375693cc6a0adf33178ba7e72d6179b36ed051065c93619752958746f0d52e2e3a9
-89d86df15f458847abdcc23976147b7b10c96452332aa03bfce1b89b7aeed080869d
-7ce8c7acb7414e7dbfcda298b532
-ProofRandomScalar = 54534ad9db9f6df6ce515d1b8017923b65cada199e936a62
-3c8eb3bd08e9b3f6584a85e4ff26e9f869d30b6c7c6cc56fd94e306974fbcc3b
-Output = b558e37f6435a12fefded196936a4c1d0882bf4a115002920744ecb3128
-43678f396f7d36711cf551750388ddf7a53a3aea7fd0ac60568cd2d4ead16a1ee106
-f
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
+3833a26e9388336361686ff1f83df55046504dfecad8549ba112
+BlindedElement = 38b758b69dfaaff8576eaaabfe70801813d95eb098f85516bcd
+46a0f68d1ea8cc1dea3bc7c8d340ee77c5bbca6e7d723e51d77e0807acd0d
+EvaluationElement = 7a8374bbae55dfc91e10a9d8042015419c505a6a8ac54e5b
+93867747eb04252aba316d9f750fa0c54458aa8c90e963a60af5ae6f141af8d2
+Proof = 2fd38cf9829c5f3fd294a5eb114356cd67cc5839cf797dc060273e07cf57
+0dbabea029f0bf4675d84866865d1d146bfa38eff8195b59cf3c180bab30509061b9
+d02e70f709f085dc8c98c0924259c9a3463ef5ceb97105989941155b98bd7b03b1e1
+e538850139dc1a56beff1bb9401f
+ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0
+627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b
+Output = 3db64b6f803391e7c9803135457da250eb29778480c30f29d53e9ff46c3
+ce5ba9555418fc28af347c18b77a990eb904d0043a3411837b6d316f749428a9a370
+4
 ~~~
 
 #### Test Vector 2, Batch Size 1
 
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = beda1edc786e5fd0033feac1992c53a607d516a46251614940e76a2763b8
-0683e5b789398710bdbc774d9221dd33c509b4805fc26f0c8d0b
-BlindedElement = 2e04b6883057a5b5ba020d077ae36dee76a07c2f3eb8cc55baf
-dfb3da9c7405ffe50802f646ca3c3ef39d195c2d88ee56e73825c7cd2319a
-EvaluationElement = 6270b2f73738aa846dca34d7b30b7c4f943e31d4d4fb35c5
-98f5d608cf25648b44553d43b158dc2707eda170dc439740c10d7b4355bf0f83
-Proof = f731f60aa18d508f07dd3b7851fe9f8cfe6f02c4ea2814cfe8af3203e493
-44041e6acf0f09fdffdc02d22728544b9bda8d0604e727f27a1efa16526f169191de
-db35a1338bf399d8737d6d1638f6d4b895c0869b4194e66fb0dbb4b3e0437a2af0d7
-6dd8cfb0bf38c9de605dc5749603
-ProofRandomScalar = 00cc800042a0cff31f865698f8858efa75a1f0faef934317
-dd6a10bfbbb39f9f2d97dcd5ff4eae02980b08fc68da7b71d39399dc4eb0400a
-Output = eb14608be2f14c25b2c9fdd23690d293d0c6aaac501a3405b626b8699cf
-34bb9dd4c2d7987b6391519b9480da453611509ba98098b3e79a35acd00f5e9d8abc
-e
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
+3833a26e9388336361686ff1f83df55046504dfecad8549ba112
+BlindedElement = ea9b2d51579f5c07c5c511cf3bba888f5fc76d6ce29075a0b02
+5adb3daf4b568045c28e6bd00442251597ba6264e59beaf46220d8405fff6
+EvaluationElement = f6d23094a82e33e231003a1ecdd4659029d613932b767451
+c607ec428315283fe0b121bf09d7c88cf2ed50910463e38383fb52e5562a87f0
+Proof = 104e45c171bd7ca9119af1091e3175c8af4e9efdbd4704b3d5a8dfc99465
+9842ea021da27a9c1e0fbac369627eb5e9cf9e82964b7412081f15f6bfc5c68425f6
+4f1a4dae420a03d582a6cfffc0fc4da71a145bb5305ae28985e15e067d28523578ea
+696205cea28cf5831abed3e40f37
+ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0
+627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b
+Output = 4dc9ec52b6aa7f1f38a320d10cb58e0d86b040f6376d2f178f42c99986f
+e932aca7162cb72dd94056724617979c0f7ea652b1492bbad1d82748a38ff4daf129
+8
 ~~~
 
 #### Test Vector 3, Batch Size 2
 
 ~~~
 Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = 89ae863bc6f3e8b59bbd1354548220e81cd0ffb6f9e4ec2173870ae684f8
-6b1c06e41ecdb9ef83429e58098b8f30a6b49d414ad5f941cf05,7b1f0b697d9efa2
-b60c984df38632f1096f2bf292478118d78e9edabbe9ad22900ad84b1a2cdcb869c7
-0c83260691e69ea7f473c3b478707
-BlindedElement = c86795bcec21f2b337865406ecbb9495dcacfb0b0d7d2a857dd
-31f0f70619a403d42bb57fc53c9182878baa7be06e337c885ba0023190d63,7eba6e
-7672c0a7cb7c725ac98adf2b081e05fce49bd5cbc6c0b687aceac45ee0aab63cb13d
-0f0493a265996a7aa94c9b30f4fc0c385a36af
-EvaluationElement = 14553405aed5bd3b2672fc74f52aa1d9efb9cdd5ec668476
-d74c60eca8930994aeaf61eba482173e5953988d702ce5175ab10c1585cbc4a2,727
-5d01889988341f8c9c8d0adaedb54af2d166112ac01f2c053fc772cb09d69a33ee0f
-fc6a92ca0d752e35f4a33ba0677c37a3618ae07dd
-Proof = 820c0da6f0ceb390355da6fb002549f37031e92337bde432d3518541d2f3
-e6e4f86fbaa2aa0aa53f15db278a0aa2d305226911e408c25f2bcb3a6774089d075d
-3a92e273fbe5359a9c81f9e83082a2e8b02f34d248789f8da583296e7c531e9d8707
-90042248e589809a40631feaa914
-ProofRandomScalar = 7baaffc0af7cf69078ce1702514d93f32828684a1796b559
-988623c12413cf511d13cb07ecb6d54be4962fe28eed7d4386c156301dc2db01
-Output = b558e37f6435a12fefded196936a4c1d0882bf4a115002920744ecb3128
-43678f396f7d36711cf551750388ddf7a53a3aea7fd0ac60568cd2d4ead16a1ee106
-f,eb14608be2f14c25b2c9fdd23690d293d0c6aaac501a3405b626b8699cf34bb9dd
-4c2d7987b6391519b9480da453611509ba98098b3e79a35acd00f5e9d8abce
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
+3833a26e9388336361686ff1f83df55046504dfecad8549ba112,b1b748135d405ce
+48c6973401d9455bb8ccd18b01d0295c0627f67661200dbf9569f73fbb3925daa043
+a070e5f953d80bb464ea369e5522b
+BlindedElement = 38b758b69dfaaff8576eaaabfe70801813d95eb098f85516bcd
+46a0f68d1ea8cc1dea3bc7c8d340ee77c5bbca6e7d723e51d77e0807acd0d,5a788e
+f7949021b22da4a4e89b2443458c96fcbec8b66b08df885eec8fb4070fefe8b50e08
+5e043c368cc05a9339b5ae31eb6482efc0d933
+EvaluationElement = 7a8374bbae55dfc91e10a9d8042015419c505a6a8ac54e5b
+93867747eb04252aba316d9f750fa0c54458aa8c90e963a60af5ae6f141af8d2,0ac
+81e0e5b9fa6d90be58a6fc3fb4fde57e0efacbe210cebc2c85a6e934114b5e0e5ba4
+cc202bde7cd7708415cdcc2312a51fca6ad6f06bf
+Proof = a221b134d99ba97cad98bf45341eeacd8a402a6e4c5ea5f93cee54ad0f2b
+ee544f67d2859a5253cb9def403bfee9420a5224fad35e3f9a3fbb5f28f6b8abcb34
+130beaa158a41d1497aacc2f073b2da5471067bb832ec8044f417f528e2e6ccb897f
+992424220d608b5e7bbfd4257e1f
+ProofRandomScalar = 63798726803c9451ba405f00ef3acb633ddf0c420574a2ec
+6cbf28f840800e355c9fbaac10699686de2724ed22e797a00f3bd93d105a7f23
+Output = 3db64b6f803391e7c9803135457da250eb29778480c30f29d53e9ff46c3
+ce5ba9555418fc28af347c18b77a990eb904d0043a3411837b6d316f749428a9a370
+4,4dc9ec52b6aa7f1f38a320d10cb58e0d86b040f6376d2f178f42c99986fe932aca
+7162cb72dd94056724617979c0f7ea652b1492bbad1d82748a38ff4daf1298
 ~~~
 
 ### POPRF Mode
@@ -330,10 +330,10 @@ f,eb14608be2f14c25b2c9fdd23690d293d0c6aaac501a3405b626b8699cf34bb9dd
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
 KeyInfo = 74657374206b6579
-skSm = f68691e40ba92bfdf37acfff161f5404f9ae0e53c7cedb0a790ab17c4c0a7
-4a314c24974057464185e2d2e648f74ee6663443646db2c111a
-pkSm = 2a742a63231b139ce19eab43e7a855f32e5dcbd16ef52a7f968456a814104
-5d49e3e28a995cfaa22ee104e22f2239f624b3fa7d41bf15186
+skSm = fdd59cb218c7fbdcd48b18ef21ab647a6c210110c765bc3da6c11e563671a
+48402c23129ce2ffd021d99da5a2d04158883c65d7f74a4901b
+pkSm = 1223e0aec4ee5bc19181078be380cc745d1896e1369aed3cc8a45b40ba3f9
+aa1f79e23d542d6529e17465d1954d75e336910c6417de99200
 ~~~
 
 #### Test Vector 1, Batch Size 1
@@ -341,21 +341,21 @@ pkSm = 2a742a63231b139ce19eab43e7a855f32e5dcbd16ef52a7f968456a814104
 ~~~
 Input = 00
 Info = 7465737420696e666f
-Blind = ee671e4c9b6783bd5e4a55d2e8474fe0ec811b4cca7c0e51a886c4343d83
-c4e5228b87399f1dbf033ee131fe52bae62a0cb27eb7abfcab24
-BlindedElement = 4c371528ab436b8a6a5bea333cc5702c70cdddb80d12dc2eafa
-06b87c15bba8b0b5451bc09f3d07e57c12af4c0398b09ae91b678fdeaf2aa
-EvaluationElement = d27f65d6c41880303989752e40748e940add1ad32e7f76cc
-bb873b7fff424d348ec8e43c11402e02934c1fcdadeacbca2d2e5171daaeef90
-Proof = bf2f61413c56c0351151c1995007ceb2e197c987056f20a54f0027e544a0
-b20a7891b9aa882203f2e09e1a0ca9464e3cdf130eea9e1123023460d3f280dac87d
-23b8d2258666d002f57810d8847832b775984819e457c7bbe703947e7aeccdf59d3e
-520437edefc26b814f9fa7fa9917
-ProofRandomScalar = c4b297c662a87631531aade91c0558d87224d92247bdfa41
-9a53af4cbdb352b0a2016e5e5f6c0bee4a642526ef9910289315b71fdee5df1e
-Output = 1ffbf9591b674e6a089279a8319c75e949cc277d7b5c757361412180307
-90755e90af009768e1b9240c9734d8886c6121123384140b26c38c7a6c4217a1b3d9
-4
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
+3833a26e9388336361686ff1f83df55046504dfecad8549ba112
+BlindedElement = f86104fcefec6bdca7767bc3e6a2ac9de2b00546579fd50ff66
+687df531f7a2dfa8689a6cfdf91efc32d6fff490e722990752b7bc4bda28f
+EvaluationElement = 76f27e6fa79cd38638e35f5caa5d641e41526fbfd9272c19
+be22dfc8cdd962e6d5d4e0c605c9bd6588eb9698a2bbf792a0827bb1116c8812
+Proof = 3a1b3400ad16e1562e731c64520fa5a3664c1487ffe6537e85029842904d
+3e01f9e7435b881ab9346847cc3470a2b37e6a10a4ef7bd36b2d06c602086a33252f
+39c562aab5820a66c3bdf9d72583587e93ea893725be535cdeca1094d5b4dae119b4
+9456162f60034a904f521f7cd818
+ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0
+627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b
+Output = 2a08f81bf204eb43a57dbc011946861ed715a2fd3d39a3b35e43c74d07d
+4734149ba163389a02f6cd33fbb5b84e167d35dca7a7dc00b89418398c255c8293ac
+6
 ~~~
 
 #### Test Vector 2, Batch Size 1
@@ -363,21 +363,21 @@ Output = 1ffbf9591b674e6a089279a8319c75e949cc277d7b5c757361412180307
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
 Info = 7465737420696e666f
-Blind = 1abe4937f28f531b14ac96b844320e7a66810c2d9391cbb877348301ab59
-a3a91b4a2129672886ae5da7839f2ac8cf1c5fa92703f5b3fd06
-BlindedElement = dea615b00285247715173fc6db40cab1436607bc0eaed3d7a1a
-1467b70c7ff2f2ce91c05bcaeda2b01952926f254f13e1a763a174caa693a
-EvaluationElement = a692017b9e91efbe6641c3ef0cd3b352022ed08bb5ed0c1d
-a0838589bebe53c2d2959818359cb0213b94cafa672673608b9a2280671d6c75
-Proof = ede122b8ce87d22fa1bb9dd38dc76da1a9ff812a8d2cbf3d2a6e86a10331
-a849d203bd925d6f130d80f333aa0443488731769e975b4c900d923d740fec13a61d
-3175a0daf9a88d8f66704b36ca2b1b7fefd6cab4ffb50fe998e53ce4743ee9466a56
-886f79fd6d5b924553f64130c60a
-ProofRandomScalar = a3e896e126d371f6380ca41757f6458b93b049e1b0d73ab5
-b8d914b08dff3e52e62ea8898d35b2862d28ff4c5f89353d25d6b5a8dc014d3b
-Output = daeb206a0e1fc120ebe4ad885f851f456f7d8908166839b7dc541f71251
-4203d9a3589025b4bfad6a79c6d40bfbf217f44a9aa17874a1ec271b23cced72a44e
-f
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
+3833a26e9388336361686ff1f83df55046504dfecad8549ba112
+BlindedElement = e6f508abea28cbb0242f0dae1c0a92e017127edb7c8d8e0ec98
+a5ea25c6bc9bb86bfc0bf9b8a086302e29a2a4b0a1d9d80f2d439cfba3ec1
+EvaluationElement = 1ea637b039e0ab12c6959c74e275471e33655007a7fa23af
+97ec578bcfc8c3381d4929ebf51433b76460d583f16b7cf1e75b9708f5d9d2f7
+Proof = d53a1bfeafc5b47fc86406fba080e57434a7004a0739399ccb356f790b13
+585da9d69a25c526e039fa06ad6a5781283ea7997eced063fd32e58bc95d57fd771c
+ad4a7e23633ae2049eec5ad86ade6a5e98d44f78fd86b5f55ab3c7a03025d6aec1f4
+f50a2bd7b9b554841f6b4cd23d14
+ProofRandomScalar = b1b748135d405ce48c6973401d9455bb8ccd18b01d0295c0
+627f67661200dbf9569f73fbb3925daa043a070e5f953d80bb464ea369e5522b
+Output = 80ac73a09fbf8cbd329ff1b7f42d8d14e46ae5b732f776f3203f0680daf
+265254360da0afcd9dc1d0cd3858ab21ce8e7a19f0426d7e701cfda34fb8238c9e43
+4
 ~~~
 
 #### Test Vector 3, Batch Size 2
@@ -385,28 +385,28 @@ f
 ~~~
 Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
 Info = 7465737420696e666f
-Blind = 255d8adc40b8f39f14cd8bd4ade8abbb95166afdc9e922203abe7a853985
-4c64b943b0b46e1e1b47cfb52e9a0867c8cde22bcbdd724d9f09,71bd897c56c86b3
-1b096103b7e2d26d0f4d66be95299379b41668dbbc5ece26cc212d9f2cbfaf479efa
-17b7f6b056dfcfbee5bd7365cea26
-BlindedElement = 361b80bba04ff4b211e38e636a8530531213a44f44738992b18
-eaf0d9759eedcb7e4034e9bda6f8829250aff72343b0d2d1e23d612d94674,c68d79
-d1a614b90e6ab1dc14a982f9fdd423edc94a10d87d45e32935e363079967ad289482
-8b1764cca8dec5e9f919def474b1d03b6c069d
-EvaluationElement = 32629ccfd36787d8d80756f025f6c23c21145dd22c28d974
-f34098e166a300731b691e1faa7e3959c1bb38312c43d1d693cbab4b90fe7d2e,eec
-655a1a869b3f0f470f7a0f2cef69eb6539c6c1b9e49d9b380bccc7b510d466f45d88
-fa690b687a8507d1e0b275028d095292fc4aadd2d
-Proof = 2f3501925c81837232ae34e5351518ad35e24f1d32f7459da3c19cae7746
-95e7dc1eca32133dd57cd0e2eb67c75c9edd9cd3ff9c5e1759314ea99a4eca322f6e
-56f4b80795f67d1bf747834d2d7b3049351979ca876ecf28f87b81fba243269e3c09
-ea1889abd968af67c7ca511d0c3d
-ProofRandomScalar = bbbf1ebe98b192e93cedceb9c0164e95b891bd8bc81721b8
-ea31835d6f9687a36c94592ab76579f42ce1be6961f0700496e71df8c17ab50c
-Output = 1ffbf9591b674e6a089279a8319c75e949cc277d7b5c757361412180307
-90755e90af009768e1b9240c9734d8886c6121123384140b26c38c7a6c4217a1b3d9
-4,daeb206a0e1fc120ebe4ad885f851f456f7d8908166839b7dc541f712514203d9a
-3589025b4bfad6a79c6d40bfbf217f44a9aa17874a1ec271b23cced72a44ef
+Blind = 64d37aed22a27f5191de1c1d69fadb899d8862b58eb4220029e036ec65fa
+3833a26e9388336361686ff1f83df55046504dfecad8549ba112,b1b748135d405ce
+48c6973401d9455bb8ccd18b01d0295c0627f67661200dbf9569f73fbb3925daa043
+a070e5f953d80bb464ea369e5522b
+BlindedElement = f86104fcefec6bdca7767bc3e6a2ac9de2b00546579fd50ff66
+687df531f7a2dfa8689a6cfdf91efc32d6fff490e722990752b7bc4bda28f,50c684
+9c8f6355687bbc9d4675bcea953cb913c5447c9c8400062ae37f808ce8a75d592c56
+f3393d4ea12ec72f9f84402002eb497201089a
+EvaluationElement = 76f27e6fa79cd38638e35f5caa5d641e41526fbfd9272c19
+be22dfc8cdd962e6d5d4e0c605c9bd6588eb9698a2bbf792a0827bb1116c8812,7ca
+a4dd83ecae98fc3e282a0e7df1887393a3fc1e17935dfe355da394756fbfcad65386
+eeedf1ba8498411645448c7027753cd9090198c02
+Proof = b4f869bf5ec65e0152af5bd29f9fa32c3dfc00355e4e019feda07a281547
+fb2f0c559c600bf6cb52a92753264d1c1367e0134b132880732ec70a8c741d60370e
+5c22c4aca0e4564732b0157858f3c968bda06aab34c71386ec88afe76ec2c14bf56f
+0adf7b05bab826e4aa034cc78837
+ProofRandomScalar = 63798726803c9451ba405f00ef3acb633ddf0c420574a2ec
+6cbf28f840800e355c9fbaac10699686de2724ed22e797a00f3bd93d105a7f23
+Output = 2a08f81bf204eb43a57dbc011946861ed715a2fd3d39a3b35e43c74d07d
+4734149ba163389a02f6cd33fbb5b84e167d35dca7a7dc00b89418398c255c8293ac
+6,80ac73a09fbf8cbd329ff1b7f42d8d14e46ae5b732f776f3203f0680daf2652543
+60da0afcd9dc1d0cd3858ab21ce8e7a19f0426d7e701cfda34fb8238c9e434
 ~~~
 
 ## OPRF(P-256, SHA-256)
@@ -417,36 +417,36 @@ Output = 1ffbf9591b674e6a089279a8319c75e949cc277d7b5c757361412180307
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3
 KeyInfo = 74657374206b6579
-skSm = 88a91851d93ab3e4f2636babc60d6ce9d1aee2b86dece13fa8590d955a08d
-987
+skSm = 274d7747cf2e26352ecea6bd768c426087da3dfcd466b6841b441ada8412f
+b33
 ~~~
 
 #### Test Vector 1, Batch Size 1
 
 ~~~
 Input = 00
-Blind = f70cf205f782fa11a0d61b2f5a8a2a1143368327f3077c68a1545e9aafbb
-a6aa
-BlindedElement = 0372ffe1ebd9273f17b09916d31e7884707e8902f7e3af2a1b3
-ae1dfbfae9b5126
-EvaluationElement = 02aa5b346b0375cd734014ffa9ed2135a1b07565c44fe64d
-5accfe6ab6d8c37f77
-Output = 413c5d45657ce515914232ef0bafdbc1bfa5c272d4b403f2cea0ccf7ca1
-8f9be
+Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 02ff9dc7d4350ab6fe1f41299ec5fa8283b6ef37fc62682ea69
+6142e13aad4ae9c
+EvaluationElement = 023a5facf92477164f10cc6bf35b4d9272bfadf98dbabbe7
+b7a137efa1af6546fb
+Output = 488d693c0d43ab75703901fa1398907cf7dc7a90978d1c2f0def63c88e8
+1b8b0
 ~~~
 
 #### Test Vector 2, Batch Size 1
 
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = 482562df55c99bf9591cb0eab2a72d044c05ca2cc2ef9b609a38546f74b6
-d689
-BlindedElement = 02fefe6e044601a158175fb4bf90c06841ca7211dde4e56e5ca
-c6dd45728cfa04a
-EvaluationElement = 03167ed445f79ffa867268e30c0aa240ad1a863569016406
-6d833e350802e57273
-Output = 2a44e98a9df03b79dc27c178d96cfa69ba995159fe6a7b6013c7205f9ba
-57038
+Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 03b3cd723330e42975e6e18a6157ecf9455894c18a0189e3e62
+4a46d705f790fcc
+EvaluationElement = 03f1ea590f2cc4afd45a841285c6be4d88825a9c6c04eb55
+a1ca996583dd3e2e9f
+Output = dacd8400f6fae62beabead9bc27869b5109fb5d87da338ae2488712ec25
+f1be9
 ~~~
 
 ### VOPRF Mode
@@ -455,68 +455,68 @@ Output = 2a44e98a9df03b79dc27c178d96cfa69ba995159fe6a7b6013c7205f9ba
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3
 KeyInfo = 74657374206b6579
-skSm = c8a626b52be02b06e9cdb1a05490392938642a30b1451b0cd1be1d3612b33
-6b5
-pkSm = 0201d3da874a209120ac442081e9ef9ed8ee76fda919d0f386cb5a0143755
-b10df
+skSm = b3d12edba73e40401fdc27c0094a56337feb3646d1633345af7e7142a6b15
+59d
+pkSm = 03f9fc787c9a4dda44a4b811a961d1fd60f87be7465b8a1b9058dc534dae7
+0624c
 ~~~
 
 #### Test Vector 1, Batch Size 1
 
 ~~~
 Input = 00
-Blind = e74c5078a81806f74dd65065273c5bd886c7f87ff8c5f39f90320718eff7
-47e3
-BlindedElement = 029d750421c5c726658902c47d3675ebba01ba25d0bd127bf6e
-338b801b166f1d2
-EvaluationElement = 0291e9890c7418a2fc1ac635d2650bae3f1a25a9ffcd0bc0
-1b3c39fcee4b095dca
-Proof = 54ec2d8558f5c72ff32489556c3ba1f3087810c5f51cc025f07adc034df2
-dcd6d706e7bdae3119b70748cbf76b66d520de87bf90287a091cf6f8d2a465cf2200
-ProofRandomScalar = dfc19eb96faba6382ec845097904db87240b9dd47b1e487e
-c625f11a7ba2cc3e
-Output = a906579bce2c9123e5a105d4bdbcafb513d7d764e4f0937bee95b362527
-78424
+Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 02bf13d60f3e39e2018c7be9876d88b52e56c0fc2847c8550e3
+cee152c51cf72ec
+EvaluationElement = 0253e64b5251607348f2b46064805275a849e44db465f649
+267c54bd7a774d670f
+Proof = d0bff8c87ee38f2b2e9e28161fb0f3bc7e4c3bee7329276487d4fd98d4f4
+74fff793a846ffcb44d48f9545e321d89e4e6bccea858089732abf10bf19a220a936
+ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c
+e45c405d1348b7b1
+Output = 9df5d51a9149a86c3660396feabaf790b8c838fc96012adba5acbd913f2
+a4016
 ~~~
 
 #### Test Vector 2, Batch Size 1
 
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = dfe89ac0cdd6b74684580de0f95f8e06aa6f6663d48b1a4b998a539380ed
-73cb
-BlindedElement = 02e6085d4017ae0bede4b261977b588349d323414eb5c409e55
-2e2bd4c82df498b
-EvaluationElement = 03a649c5ac48f33a6c6cd82120145e673e17395ca94ea824
-c7d2dda7203ba4159a
-Proof = 1a79f6a52579f7acb0100c916390989a1dca3c1b3078402e102b8dd037f0
-b34d929d38239b34175f1328708ec197bfc532ef31dafdf1ee85db4ccf8769844fdb
-ProofRandomScalar = 4f9a70536c175f11a827452672b60d4e9f89eba281046e28
-39dd2c7a98309b07
-Output = d13c62d285a71acb534dcebdf312bfec0e2a3fcb79f4ac32d2dfb0bc9aa
-e3cc7
+Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 02a13e263fd9df5aa0078f8d5d6cbe8763e5bee69ee06841a66
+dad0db8701480cf
+EvaluationElement = 02d9f54fcb97bdab47e6664376a75911f1c3e447f5754550
+89d926fbd032cb6e53
+Proof = e3ccd78a2f2428d04599c90d4b45e3de49b38a3ba0c80a224b8125747648
+718319238dd349cdeb533a6d24333b56aafbb202bec1831511717b231b89b8b36853
+ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c
+e45c405d1348b7b1
+Output = beef8ec835625f610d616d32b1d13f2f899f07c0b8089fa48a1f0ecbc5a
+91b8b
 ~~~
 
 #### Test Vector 3, Batch Size 2
 
 ~~~
 Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = 9e68a597db2c14728fade716a6a82d600444b26de335ba38cf092d80c7cf
-2cb6,d3d6e1e1006dc8984ad28a4c93ecfc36fc2171046b3c4284855cfa2434ed98d
-c
-BlindedElement = 03b2332e9dc41bd9b7997df58c1f432d13c4f018cb2095ef8eb
-14ef3b323aceb86,03eea6961f7f16deaa8deb6f68a865ae04d8be760626cad589b2
-2cb90262e30b0b
-EvaluationElement = 021f7b60c7c53fd3a6867cb38bb7f6febdbd802a78d10111
-00a779b67a801c3bbe,0266e83c8c525cd612669737496f0a736feb7d4209a520d2c
-dc204971215db0262
-Proof = 92c5c32bc18f3f5dbdd51473f4e3ecc9b07797c63d679be5399b223ae801
-ddd1e469df512f907d317a0930dd0e644b26c96edc87d2f8e0a09e66bc73db8647c5
-ProofRandomScalar = 6e953a630772f68b53baade9962d164565d8c0e3a1ba1a33
-7759061965a423da
-Output = a906579bce2c9123e5a105d4bdbcafb513d7d764e4f0937bee95b362527
-78424,d13c62d285a71acb534dcebdf312bfec0e2a3fcb79f4ac32d2dfb0bc9aae3c
-c7
+Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364,f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b
+1
+BlindedElement = 02bf13d60f3e39e2018c7be9876d88b52e56c0fc2847c8550e3
+cee152c51cf72ec,0322b89e261428d77367cba2aa78fdfa2b21c2919150cafe802e
+9020c7f95ec180
+EvaluationElement = 0253e64b5251607348f2b46064805275a849e44db465f649
+267c54bd7a774d670f,02182b225cfab1d2e25da200549d8b5e2c4581aa7b7bd85be
+f9b61a14549f58230
+Proof = 900fd64d21320b6059a2810f7046066c4c91a5f4e4f6063c7b51316a4862
+2de8f3a28e5f1d0ebe8ae77fdaacbcb1ae92685243e9ceb813bb749dee6c7123270e
+ProofRandomScalar = 350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba
+51943c8026877963
+Output = 9df5d51a9149a86c3660396feabaf790b8c838fc96012adba5acbd913f2
+a4016,beef8ec835625f610d616d32b1d13f2f899f07c0b8089fa48a1f0ecbc5a91b
+8b
 ~~~
 
 ### POPRF Mode
@@ -525,10 +525,10 @@ c7
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3
 KeyInfo = 74657374206b6579
-skSm = b75567bfc40aaaf7735c35c6ad5d55a725c9d42ac66df2e1dbd2027bde289
-264
-pkSm = 02eca084e8d6ac9ed1c5962e004e95e7c68a81e04be93ceabf79c619de2bc
-c3eb9
+skSm = 59519f6c7da344f340ad35ad895a5b97437673cc3ac8b964b823cdb52c932
+f86
+pkSm = 0335065d006a3db4fb09154024dff38c3188a1027e19ce6932e6824c12764
+47766
 ~~~
 
 #### Test Vector 1, Batch Size 1
@@ -536,18 +536,18 @@ c3eb9
 ~~~
 Input = 00
 Info = 7465737420696e666f
-Blind = 4238835743037876080d2e3e27bc3ce7b5fb6a1107ffedeaedb371767432
-b68c
-BlindedElement = 02cb57f07ba100b93ce1bf8176963c8c7f73a76827f1c1401a9
-23d7ca4083e15aa
-EvaluationElement = 03059d58ec9a801e33f57525c03241d8ffb61b67a18edd35
-222d864ffbb42b5d2f
-Proof = 13889d6849850ccd0119981fc053a38a30a57d275091df2887943d1332f7
-38204f8a6cf2fb6e57c9b118ec82b9b012f8864561e4cd8866245f9c762b9d45dbf9
-ProofRandomScalar = 3d5c65b55a1b8960563b3420d7764097502850c445ccd86e
-2d20d7e4ec77617b
-Output = 15fce9922a2307349aac2eccc41941283e3c5e938aaf2506f99a6d8b6ee
-34ef8
+Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 02811b5218bd2bb8361f990efb6062f1201241bcd6f053a5c35
+c34dcd7292e7730
+EvaluationElement = 02555fc8577c4f88eeb13bc6ac53994f8fb287a33a704592
+05ddff91bc19b6a2da
+Proof = d87b112dfa11b77f226b85693ab1b5f63adfa491b6e051e570a12392a926
+c4816778b527526ba6212c4b0597f13e05f5f9b2223429aab82cd2596625ab1cad0b
+ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c
+e45c405d1348b7b1
+Output = af6525716fe5dd844076bb5cb118ceda08c02c2d1a02368922ddad63f40
+f8b44
 ~~~
 
 #### Test Vector 2, Batch Size 1
@@ -555,18 +555,18 @@ Output = 15fce9922a2307349aac2eccc41941283e3c5e938aaf2506f99a6d8b6ee
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
 Info = 7465737420696e666f
-Blind = c262bf51dc970d63acb5ab74318e54223c759e9747f59c0d4ecbc0873026
-67fb
-BlindedElement = 02208809631cc08f553d7843db566c55746e760a77c63513d2b
-22096f98452cf9d
-EvaluationElement = 02301ee1cf1d01276649ac0f718ebbfa1c0d6a1b3e7ea82b
-3085e9173910fcb0ef
-Proof = cb69a1ec76643a2100cc9bfe6cf1ed1fa5ba3612ed3e3211036b5ed835a1
-38be3eb92126694e3e925ab138d4df885be18ed80371847f80baab82ce70588eebaf
-ProofRandomScalar = 6c6990f0fcd9a655f77ff0b2ebcfe21e1a1ca4a84361e9f1
-b18e24c9a40ed5ef
-Output = a06ed7380210856caaba173bcad06266186c6638d86e372c3c96b9bd2f3
-53543
+Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 03e9ddbb1fa70461119afcf0ffbfe3fcd105690c14cf0e07872
+e72d4f63aa0e197
+EvaluationElement = 03156037ca1ab2166e924e6197344a9885256de2cd7d9432
+ae36e3f94049e94bbb
+Proof = d087b632e2aa4a67e0bc8b7cf012646217a2dfdbf49c60f236a43c66c72b
+7f2767b85dc93b96a11e3286ef1ff1864b544a68c2c2d8c2bc35ef7cf7dd34189d3e
+ProofRandomScalar = f9db001266677f62c095021db018cd8cbb55941d4073698c
+e45c405d1348b7b1
+Output = 192f4e5d4f89ffe4b9cea5c1c9619ffe32443a5c04fc35f98c3821420cf
+1890c
 ~~~
 
 #### Test Vector 3, Batch Size 2
@@ -574,22 +574,22 @@ Output = a06ed7380210856caaba173bcad06266186c6638d86e372c3c96b9bd2f3
 ~~~
 Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
 Info = 7465737420696e666f
-Blind = 3f95c9b1334d8af16ae1e69f5adc24e5aa89ebb63637c835fd39b17a1a44
-53ec,9801a9d83b5d1c0fc0812c10e18f146b14d7eb94755a918bac1ef8d69d21a7c
-2
-BlindedElement = 0277b1e97f06cb0976bf196a30dc7b3f635a40ec1337d4bda00
-f809eaf244f7133,0306823c1610cc81b08db444d7c23cd368e8b6fc1a7fa3d727f2
-8bcc7d3afa9c41
-EvaluationElement = 030f395a0e0328018c78de95ff498a0afb54fbcf34197226
-49e211940852ad0171,0221335509649461a4d201d2887af62313466af660559c348
-e8ac326fbc1c147af
-Proof = 187aaa12108c49c1395001ccaa677519572ac4680b0f41b346b9879d3ea6
-fdb9fced5c7f20b351d03786d031de79cd3c03723ce48053a13b640fe6051ee3584e
-ProofRandomScalar = fa0ea4754fb56527be010296ea880e1c6a4dbbc9ede543a2
-ad0f83fd60fdacb6
-Output = 15fce9922a2307349aac2eccc41941283e3c5e938aaf2506f99a6d8b6ee
-34ef8,a06ed7380210856caaba173bcad06266186c6638d86e372c3c96b9bd2f3535
-43
+Blind = 3338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364,f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b
+1
+BlindedElement = 02811b5218bd2bb8361f990efb6062f1201241bcd6f053a5c35
+c34dcd7292e7730,0366ff91265bb4a9d24130b9e8cd3ecc523084b512b6b0722de4
+4049616b8c374f
+EvaluationElement = 02555fc8577c4f88eeb13bc6ac53994f8fb287a33a704592
+05ddff91bc19b6a2da,032bdb191ef5604cf43d0c37faead30c4b2b21e3f61c0d47c
+cc84850fc5656e500
+Proof = 1bd5f64dffa2ab8d6532122887ed55ad17d114020901a7a01cf2412d568e
+22b6d0536fd6dbefe9f417060468ee3cc451a8f3750f4d8d4acf1e98437248cc7fa2
+ProofRandomScalar = 350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba
+51943c8026877963
+Output = af6525716fe5dd844076bb5cb118ceda08c02c2d1a02368922ddad63f40
+f8b44,192f4e5d4f89ffe4b9cea5c1c9619ffe32443a5c04fc35f98c3821420cf189
+0c
 ~~~
 
 ## OPRF(P-384, SHA-384)
@@ -600,36 +600,36 @@ Output = 15fce9922a2307349aac2eccc41941283e3c5e938aaf2506f99a6d8b6ee
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
 KeyInfo = 74657374206b6579
-skSm = 8b0972b97a0339dbcdb993113426ce1fe1b11efefe53e010bc0ea279dda2e
-37ac7a5599acec1a77f43a3ac7a8252782f
+skSm = c0503759ddd1e31d8c7eae9304c9b1c16f83d1f6d962e3e7b789cd85fd581
+800e96c5c4256131aafcff9a76919abbd55
 ~~~
 
 #### Test Vector 1, Batch Size 1
 
 ~~~
 Input = 00
-Blind = cda63dff3137c959747ec1d27852fce42d79fc710159f349e7da18455479
-e27473269d2926fec54d4567adabd7951ad6
-BlindedElement = 020db1b05b22ddd8a851792dfb5b10b4f237d69522097cbb012
-7ae537e3256f86e35a72554a6ebdb26c28342fee16473dd
-EvaluationElement = 031e6e8c82d3284727a724a5854b3e2bf9958b4e5470601f
-4ca37d33d26879eca817796cb7e98bbbb1d1739eeafb33c027
-Output = b2e380ca96ea80f7550a6b663e5f7752d7d7772c46169d72308a8425903
-1e804ba577ac34e632f535a9519a692734016
+Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
+889d89dbfa691d1cde91517fa222ed7ad364
+BlindedElement = 0396a1584fedc4d91ddb753a0c49e0aa2298c1936dbc935d60f
+e793d82809f44ff05fbd1922a2cae789d700b5ef4310fb3
+EvaluationElement = 0361804cebcb1873cee5e51efd5257cd8b095521cc0089cf
+4c1100b1d749e212a044eae6d4f3d852e379eeb1bb54047823
+Output = b7ccad41ed7f56be97621bbba8cc3a4f5e8a46a28d72b0fe089d12802f8
+6f080b20726e01a99390aba3437ac50c640d6
 ~~~
 
 #### Test Vector 2, Batch Size 1
 
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = f9e066cf04a050c4fd762bff10c1b9bd5d37afc6f3644f8545b9a09a6d7a
-3073b3c9b3d78588213957ea3a5dfd0f1fe4
-BlindedElement = 023c36bf6352c93d27b118972d1040cf22f99d5a1c8134afb89
-8d30b319f70a096973db23410881f84eea599c0c73220bd
-EvaluationElement = 0240b6a002d0190793ea62a7499244027753d63b0a57cea1
-98c8c6dc883cdeb273ab385699bb414f1040bb6819313cd675
-Output = 1d155a7ba2ea75c4f1e76fb0a37231e9b0776eed3f24a6541a01907ca8a
-fb984a74408e6d2de8e481cae5dd03bdae3ce
+Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
+889d89dbfa691d1cde91517fa222ed7ad364
+BlindedElement = 0370b0b4649c0880d44c421a3ca7c915b1b6ffa61f5a1290aa2
+2258b006d148e5c105d47725e1ee1b2483b9c5666384038
+EvaluationElement = 036d0aaf31ec411ef8e11c68551434883468e56cbd5d615a
+c8c52b9dc7af326889d52d7466c5eed47f8c89707976aadc64
+Output = ca7dc32dc6434101f35a790717dd591e5963acc86d20fda68011fe228fb
+76be8da7f42c6a92284df88fb8e69480a3cb9
 ~~~
 
 ### VOPRF Mode
@@ -638,73 +638,73 @@ fb984a74408e6d2de8e481cae5dd03bdae3ce
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
 KeyInfo = 74657374206b6579
-skSm = 70855cb96c961b39ea3ea5776d89c8b7623f5891a26e8437f86e2c713bdb0
-da23415590a28184dc22088a215ebc7fe45
-pkSm = 02d7bdae4b97ecf0fbb8c00cff3a3a9b6d0fb0cc34f8490a98a74dbb59a85
-f43bda8ca7b3c0b05164f38d8efdef2c3426a
+skSm = 514fb6fe2e66af1383840759d56f71730331280f062930ee2a2f7ea42f935
+acf94087355699d788abfdf09d19a5c85ac
+pkSm = 02f773b99e65ad26e8cd20614910ce7ad74c1baa5bdbfd9f124389dc8ef44
+b5989f5bf036f6802dc2242fd7068b73da29f
 ~~~
 
 #### Test Vector 1, Batch Size 1
 
 ~~~
 Input = 00
-Blind = 61247a74d0c62c98ddff1365bb9b82b279e775b7220c673c782e351691be
-a8206a6b6856c044df390ab5683964fc7aac
-BlindedElement = 026601d99c313b827a09aad832fcc814ac5257a57bb49d65c05
-e247df9518315a66557fc8af56b4521c51900aaab1a2ea9
-EvaluationElement = 020b478b9c9b1a5935e07fb532eac2e596b78170a0e755ec
-c71829419e63a2119eae23be281e109de205cd85af7e42228a
-Proof = 02d0946f1795048bc803171aea5b4a9a5f256bd5fa9414e5fa76dd17a4aa
-a94307814d57c2cca239485e29bb76d4ac1b4d3d62dfbb8e43c7135b2ebe50fe923e
-30bd99e1e6ec961db18fa6e67c63dd6652284c15860156c08d64d838efbeeb68
-ProofRandomScalar = f5685928c72d9dab8ddfe45de734ce0d4ff5823d2e40c4fc
-f880e9a8272b46eea593b1095e7d38ba6ff37c42b3c48598
-Output = f18884ace2e342f849cea7f2f17de902b9884574fdaa8f507356f482c6b
-67013f329e8c899b3c2c154af1defaa11d656
+Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
+889d89dbfa691d1cde91517fa222ed7ad364
+BlindedElement = 03022e23d8356d74d8f9a24ade759fb4e7cf050d1a770110878
+83d4db52f16751d8d987fa49764c157c1039c4cdfa5ef7a
+EvaluationElement = 0202bdefbc2d55a37aa848df5efc561055235d9190da9ec3
+0ccfb84d93b033a29c4fb1968c55c63a0b90a205e1e9c4c19f
+Proof = 929ee0254047350f580cdbd6fca706a9d110e4fc0aa1383af8d35a536795
+69c038d90900e8810eca177b9cfd6a2d0f1fb5ed7a2e0f3107719cbd9c74ab7d9502
+79869f67551b629c3706c8f9cee651d700453ca44e43b0a08c05502cd28f3960
+ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62
+c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
+Output = 7eb3cc88d920431c3a5ea3fb6e36b515b6d82c5ef537e285918fe7c741e
+97819ce029657d6cced0f8850f47ff281c444
 ~~~
 
 #### Test Vector 2, Batch Size 1
 
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = ef54a703503046d8272eaea47cfa963b696f07af04cbc6545ca16de56540
-574e2bc92534ac475d6a3649f3e9cdf20a7f
-BlindedElement = 0279e61686e698fdbac5cf484f54846db8cdf6f403fa88209c3
-4c56c584fe4ca600ac81b61aad11c5e639ff1add3b30de4
-EvaluationElement = 03900e8e3f5b8bf698e7aa0aacb8dbdfaedf80220b1f640d
-e2049615985b19b913569cc2feb90725a3661146fb88ef3755
-Proof = 343536346a1145b81336eafc239f225dc6a154752492707c0465f029aa9a
-f0fe2bf0428285e43b596db633b50f0801b62b0e9c64c62f329b8a84324a415e4a58
-6cbf9477b1285c9b74f614c352e06658a8997486b8177006491e84aa96a3de09
-ProofRandomScalar = 0cdd9475ad6d9e630235ff21b634bc650bf837aaa273530d
-c66aa53bb9adb4f0ed499871eb81ae8c1af769a56d4fc42b
-Output = f91d172cdecdea4f8299c8b39426db4c47428b82f8872b8539ad9b019de
-b48b8d3c928c572ed988d5591a4442c060438
+Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
+889d89dbfa691d1cde91517fa222ed7ad364
+BlindedElement = 037ae30a62126a39ca791aadafb65769c812a559c7da92820e1
+43350b6bb8cefb543af2e0179664f9cd0d1499c018a0b18
+EvaluationElement = 0355f95a68e8c4f0d40910e9a85f09109e4e7fff84f75db1
+a4aa8e21c451ac2d872113b497bea6c0be1b535241557032a2
+Proof = f4ec262642fc9981fe5d1f0a3737f2d09ec9b056f577224013f5a3d09812
+fb22c6b45e17150d8fe3a8c7e63094cdf40a60ae1e50fc2e1678954c1ecbaed2f7d0
+7e6d597fffedc7aca450ed64164c46e62d1326ff1f6eaeba4b5dd151e953e060
+ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62
+c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
+Output = fb538f84dae5f214c5adfcf529c6fe63bc46d6a4073d540cf0dabcc7c8e
+0f3c1b43b606002a9aa52ae158a19d900c136
 ~~~
 
 #### Test Vector 3, Batch Size 2
 
 ~~~
 Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = 485cccf5018abbf875b8e81c5ade0def4fe6fa8dfc15388367a60f23616c
-d1468dae601875f7dd570624d0ae9d7be2e7,b0d53a6f8da29c3cf4f8695135d6454
-24c747bec642bc91375ff142da4687426b0b4f35c14eb2477c52e1ffe177f193b
-BlindedElement = 03dbcb21b211e7b5d2cf0c36d782308af28458539423f67a293
-36355e55035137eb768b1935b5a825c589a2913f0c2894e,036c8b2fa4dd9cd05756
-1d377b4686cddc82317ad3e5eda08bece2a8616ca724937ff933e340a47fc09bfe9b
-0fc1ef9ab6
-EvaluationElement = 03a1cba477a408162aacdca43e059309fd61cc14687a107b
-d492a1ec688a010ff49c60684e0f973412a7da2e627b1553a5,036fe6df8a99bb7b2
-c4a5020ab4c6d7e71b5abca2d5d5a418f2314b614deb40c7b3acad982951b5f524e5
-6f0e9ac7d8e95
-Proof = 1e26bf1210717b88dfae585008100e9ccaebe93b8605ca168a608cbf1855
-697b7b87d0b9c6bdca85e43143b3630e87f2fe9ce519dba3d477d2a869bcad0db9dc
-6239cd11938213f9bfd63d39de090a6fc90cd1f33f164b2c54c38bc31ad98ddf
-ProofRandomScalar = b36f4c2a140b7a3c53dd8efb6171d3bb4d73591be8483a1a
-38e40c13a04b0f2180dda3c36e3d43c3a8f127158d010945
-Output = f18884ace2e342f849cea7f2f17de902b9884574fdaa8f507356f482c6b
-67013f329e8c899b3c2c154af1defaa11d656,f91d172cdecdea4f8299c8b39426db
-4c47428b82f8872b8539ad9b019deb48b8d3c928c572ed988d5591a4442c060438
+Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
+889d89dbfa691d1cde91517fa222ed7ad364,803d955f0e073a04aa5d92b3fb739f5
+6f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
+BlindedElement = 03022e23d8356d74d8f9a24ade759fb4e7cf050d1a770110878
+83d4db52f16751d8d987fa49764c157c1039c4cdfa5ef7a,031ee43111a2406b09eb
+4fb2a3a5fd7c690c0aa51158af766c9df1428bb18195f054c5f68ae1863e6ab3dd42
+98b3db712b
+EvaluationElement = 0202bdefbc2d55a37aa848df5efc561055235d9190da9ec3
+0ccfb84d93b033a29c4fb1968c55c63a0b90a205e1e9c4c19f,021fdbb3b92cf4f8e
+04534bc1a9f62596667c3ea49a6e89f1610b9f7f89708e8730df159827ea92e26fcf
+db2063920c89c
+Proof = 9cc7fe5a120cec6ef0d877260cf1af1861f281aa0015f371c8830f93f286
+8f5891ee6f32ec6fcbe130a50de24c93b131261eb4a242941c8d5ad9ad2f2be402d9
+386ac4afcf5e5498f35cc3db0442a77e139eb56a7b3435177e7bf1a48cef184a
+ProofRandomScalar = a097e722ed2427de86966910acba9f5c350e8040f828bf6c
+eca27405420cdf3d63cb3aef005f40ba51943c8026877963
+Output = 7eb3cc88d920431c3a5ea3fb6e36b515b6d82c5ef537e285918fe7c741e
+97819ce029657d6cced0f8850f47ff281c444,fb538f84dae5f214c5adfcf529c6fe
+63bc46d6a4073d540cf0dabcc7c8e0f3c1b43b606002a9aa52ae158a19d900c136
 ~~~
 
 ### POPRF Mode
@@ -713,10 +713,10 @@ Output = f18884ace2e342f849cea7f2f17de902b9884574fdaa8f507356f482c6b
 Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3
 KeyInfo = 74657374206b6579
-skSm = 2b65a799c107905abcc4f94bdc4756e8641112ae1fc21708cd9d62a952629
-38ded6834e46bad252b4e533ee7eec7e26e
-pkSm = 0286f37b6295bba7ebf35d2bfbb944d441fc416e51eb5ceeb63ac98afa6a6
-27ccafe20bd600c728bc5b1300148ef2ba6e6
+skSm = 0fcba4a204f67d6c13f780e613915f755319aaa3cb03cd20a5a4a6c403a48
+12a4fff5d3223e2c309aa66b05cb7611fd4
+pkSm = 03a571100213c4356177af14a7039cfee270ad1f9abde42ac3418c501209e
+d7b2fc0d4aa3373c12ba956fb555b02843fc8
 ~~~
 
 #### Test Vector 1, Batch Size 1
@@ -724,19 +724,19 @@ pkSm = 0286f37b6295bba7ebf35d2bfbb944d441fc416e51eb5ceeb63ac98afa6a6
 ~~~
 Input = 00
 Info = 7465737420696e666f
-Blind = 9572d3a8a106f875023c9722b2de94efaa02c8e46a9e48f3e2ee00241f9a
-75f3f7493200a8a605644334de4987fb60da
-BlindedElement = 0252f98f04a956afa469c62ca2850f751b112dc019d4e713c66
-2fc0735ef8573f1497cea55b750f27f0efc8330e394a3ab
-EvaluationElement = 03fb20c33a7f6f01f2bb388318a6db84f7183bc3bd5e5840
-302fe38b6b313649b523238b4c4c625614440dd6ddbbcc7272
-Proof = d33c83c1840a48759659a4d417769ae3bb1adb86326a36fa1ff24f70066b
-75d0200e5c1e7d9847e91f7d3d6843efc62101c401a7c952cde32ada6fec848450d8
-564e2c778af47ece4f50a88c6d2281bdd858b90fdfad8b093c986bc1e59aaa2e
-ProofRandomScalar = 7e82569cb56d97e9c20e59311bac3a50735d573abb787b25
-1879b77de4df554c91e25e117919a9db2af19b32ce0d501d
-Output = af52cf184180177970be0770e1c7920aa307b767556a13de38a64723d8d
-cc7b344af9b6dd8f117ac2cef249ee3acc8fb
+Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
+889d89dbfa691d1cde91517fa222ed7ad364
+BlindedElement = 03156aece0ce92e9eb8f7a9b7f6bd30230a048d41384f2fe49f
+1f9f69e180c23390e3ba8d0ee66dde6d637f03c06385f76
+EvaluationElement = 02352ec7586660cc4257a9e78366727341db0825e431fc82
+4a70a91019b67be26d8b880b2d4d8e734207d4a21a23429d74
+Proof = 77bb1ca3ba4013b93ccb302db838839098eca743de542d3c79d189f2adf0
+01999583a01aead6c248a32ff13b7f1f3d6b2dd04f653a5beb0f0394ad83ce5e79ea
+08ae029d669b918b6d62ed3b77b08a07f04bbc341fae06444d196746da4da884
+ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62
+c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
+Output = fa15c0fe8706ac256dfd3c38d21ba0cd57b927cfcf3e4d6d5554ec1272e
+670079b95cdbb2778e0df22baf50f33e12607
 ~~~
 
 #### Test Vector 2, Batch Size 1
@@ -744,19 +744,19 @@ cc7b344af9b6dd8f117ac2cef249ee3acc8fb
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
 Info = 7465737420696e666f
-Blind = 01e6e57b7ec6752a45c74f3ed36a3eb8ad0dafb634f668e415357a04fab5
-01c0f6764e854701129e38071b008286c5fc
-BlindedElement = 0257c264a1016e7a1a8236e46cb3bc11a0f13178b03262e0153
-1da14a05e75a811ba4669fc41cc9453298f71c23834f91c
-EvaluationElement = 0295529cd99f4255be59966e430bef38c93a5261b0624612
-091327c9aedaaaa40d22b03280ec15620bc91d48970f18c68f
-Proof = b5dfd5fc5ddc61ad8234c544aacbf280193da985d9204d5a30ef9d1a5964
-c1e70ffc3d9c986c93f561ab6f91f012c8ef9b9b6f2d1c178f01fe172c37c98fd4ef
-05e5b15c15e810241ed6dda051500165d9f79d4e83580ea4c810a95dddcb593c
-ProofRandomScalar = 6b61028c0ce57aa6729d935ef02e2dd607cb7efcf4ae3bba
-c5ec43774e65a9980f648a5af772f5e7337fbeefbee276ca
-Output = 8bc546462de3087cddafcf81435d5802c0c31f557c791b115a092d5b71e
-a2b6e20986bb624ead85c7a63c976c05dcddd
+Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
+889d89dbfa691d1cde91517fa222ed7ad364
+BlindedElement = 02d46e0e2d27d8bb126e1201e881d0070b8807cb5635687b20d
+d4a3a248e7a40c50a1ad3e905e43342771eb23bc8827a00
+EvaluationElement = 030879805ff65cb536293a1449c00824e55c4c1b25379f2e
+c17d97923055169a6d97b46ed7b11bb661cc8cb9535abc3d66
+Proof = 9982a8501f45839213441d4ec501cf496d06fffab65f13ca3b3e66d21398
+fe9e0e04aafdf50eae214fa9cccad3c53d524d0f8c185ed60b11fcf5c7e82e10a8d3
+f3b2ce1e4a004d65e6ad596eeb5738453465d881f2770858cd46ac32f0e16121
+ProofRandomScalar = 803d955f0e073a04aa5d92b3fb739f56f9db001266677f62
+c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
+Output = 77cb533216c32cac017d706d5f0ee4630bcb0bfefbb980d95e98dc240ab
+c70a944a44cde69b805aee3a39b2eb7d834be
 ~~~
 
 #### Test Vector 3, Batch Size 2
@@ -764,25 +764,25 @@ a2b6e20986bb624ead85c7a63c976c05dcddd
 ~~~
 Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
 Info = 7465737420696e666f
-Blind = ebd2fec41edafcba833ccaac567c14d2fa01f55b33a2fbbb37118f2f5603
-b1298346e02cbdf55c95ef9b1aadda5ef281,be210603388cbcabb8cb630aa1ad04d
-73e349009a438ce248380bd4b7e6758211fe9692922fb61f00f1a39bc735cefce
-BlindedElement = 02b1938a7613e9567a67aac83c50529238e3323c212dd407491
-1980c4d998479174ddb9c925d1b761b33da2ea0bd0ea057,031b9a47b7caf732ff32
-db035d1d073fd925c17dbb6c83e00a49af674166bf264bdb00c303edb26af96fed6f
-e9ce44dc36
-EvaluationElement = 02c75f2d383c18692e0e11b08e9187c4c047d28116977c8e
-5e1e872f1cf5eab457c04fd50274cd5cc4b1996a607470694e,02e72fbfff4c70479
-23b967ee9a6b37d902b49a465242c12b2b910daa5f30c3f947899283ed0a6c758348
-55a1ac0c64065
-Proof = bded438b699d3bb8bab26954f9a7fb5bb402f043c3364dc4f2b68976748a
-77868dec1fa2d0774d306043ee8abbad5ef8ceee6a331be2906124f53f37c96d7f5a
-4aa543053ccca87b577a32d803c3ca4841e37b3c4b5cf20aad11c59dec72a350
-ProofRandomScalar = c7a86f11c143a291e349b70b34e67b38fe9dc6f90b473750
-87d72e891df74070810500dfd391282c15d87bacdc9867a5
-Output = af52cf184180177970be0770e1c7920aa307b767556a13de38a64723d8d
-cc7b344af9b6dd8f117ac2cef249ee3acc8fb,8bc546462de3087cddafcf81435d58
-02c0c31f557c791b115a092d5b71ea2b6e20986bb624ead85c7a63c976c05dcddd
+Blind = 504650f53df8f16f6861633388936ea23338fa65ec36e0290022b48eb562
+889d89dbfa691d1cde91517fa222ed7ad364,803d955f0e073a04aa5d92b3fb739f5
+6f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b1
+BlindedElement = 03156aece0ce92e9eb8f7a9b7f6bd30230a048d41384f2fe49f
+1f9f69e180c23390e3ba8d0ee66dde6d637f03c06385f76,025663d73e3418039fdd
+ea1a212d254ec0103f28904e588b73c7da8298347706b2f69902a98e8d01c7aaa69a
+297b14c7dc
+EvaluationElement = 02352ec7586660cc4257a9e78366727341db0825e431fc82
+4a70a91019b67be26d8b880b2d4d8e734207d4a21a23429d74,02f8e532fabdd09bb
+2a7391a2a80c14f265c0456009199b77eefac1013d4a4f449dfe46d5d6d2d4d74f8c
+9fb1e2868b611
+Proof = f8c938b5d2aff7d1a05ecdcf4178d682fe7b35c375be5db88dfa59f488c6
+e4a68d4f99f16330a06f918e264ad68a78fdfad91446b72e1a3da2a65e531d520dd0
+4fd91dd49b09037648e04a44e83d0dfd2aab7627e7389818924ad9bff591d646
+ProofRandomScalar = a097e722ed2427de86966910acba9f5c350e8040f828bf6c
+eca27405420cdf3d63cb3aef005f40ba51943c8026877963
+Output = fa15c0fe8706ac256dfd3c38d21ba0cd57b927cfcf3e4d6d5554ec1272e
+670079b95cdbb2778e0df22baf50f33e12607,77cb533216c32cac017d706d5f0ee4
+630bcb0bfefbb980d95e98dc240abc70a944a44cde69b805aee3a39b2eb7d834be
 ~~~
 
 ## OPRF(P-521, SHA-512)
@@ -794,45 +794,45 @@ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3
 KeyInfo = 74657374206b6579
-skSm = 00dc7a8db919a1076810a0c1503716d91668fa9edc60952317f26d47a090b
-70dcfd3f530d07f48675cf8236d1daa81f3ff0f289942632e5cefd27a2190f0cefdc
-302
+skSm = 0152e55f3a5d836ab6c2091a904ba4b4f92e51ba59ecc211b4fc771f7c6c8
+b17fcbbb2bed8a65afd7811ceeec3eac83df6a58515b6d3c71ee0ffc349e28c3fb78
+d83
 ~~~
 
 #### Test Vector 1, Batch Size 1
 
 ~~~
 Input = 00
-Blind = 00b638b3000884019316267eae9b424f812592e4dc9cd7f7aebfb1d3d2b8
-c7fa7904503aef20c694a01d3e1154fe98e7232be9eaec5789a012a559367b1f9965
-4ddf
-BlindedElement = 02016f3fc7b3c84f673c75b3bb3e00ddd81e734cc84fe3bd4a7
-671e0a971879b7678c048f40aae87179614abc2261522303257a92127a195298744c
-54094b7b87499c0
-EvaluationElement = 0301ddff1ac88acd812a2917cee4917f8a692eaabf9fd052
-9981441b83e368175b566657729a8be5ba2573e33e7734c146ef4c8b7d41f4503842
-80797318ff3a62d79c
-Output = 383e3098d74b43f75d2e1136d7e7c08702d992e6f5f24f2bd438f98b86d
-9d143ce87281b2daf7d67c94370903ba81495655d6e9626443a895b37bb74c0276f2
-a
+Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
+88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 03016480f33f005c8a8eb1003e48ebc22e082d0b86678f8460e
+df21cc1518a13bfc0001fa143d474b18214188d93a7b3124b1b385db4cd4e356ad24
+923ae55d70ce8a7
+EvaluationElement = 03005fdb56bf49fcd073b1c4cfb42ceef5666c709785ae82
+d659e4d75c0f5591cbf812ca9ffd992ac67c1877b63978f417687a2a6c17697e858c
+f715843f9e4235566a
+Output = ddcaaceceec790f4858a09f3e06e74e8b0841681a3d45ab1393d0948379
+43f782d9ed22ae716a642d4ee428ddf1dae9ff631047864b99a305412aceb7efafa3
+2
 ~~~
 
 #### Test Vector 2, Batch Size 1
 
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = 00219598d5f1544830f9d667b683234c68ef3db95227fe3ebdfd963d0307
-0055fef107bfeb3c79c86b934061f894227b23a69eb0b53f168a4a2230ef6a7d703a
-c4ce
-BlindedElement = 0201e75b88d5de2b839f356a05c359ed610601450d83dcc9def
-649fbd00a9790161e9333cb07978d1567ecab037c498ae2b00d9181abfd7bcee3fee
-dc11de88c54190f
-EvaluationElement = 0200b99d9694bbf9b9ea783e18e5fd049fb2fdf169cf386a
-be304ccf8cdd633f7a1e25083ec6a6ca3a6e82367b38ee3c991e024097cf6fad928b
-023817cdc5dea21751
-Output = 5100f12a88477ba993cfe8eb5a82a835892b7fa3bdb47dc1db19725e4c1
-138798e0f965df4f649e3a159aaca1fdd07034f7b91c0c9ac3d064b50953bb5c867c
-3
+Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
+88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 02000e860d3b8205e0cb4f289771c8e6189b47c60cbff24459e
+12a60317ac242e9cb36ab033a620cdee5628ecae4a81303e7464d52194d801756911
+fd7ddfa5430e69c
+EvaluationElement = 0300e2663f17144682b25de378531abd6d065b770eec073a
+42494719f27748f75b4ab11aecb06bf8815bcc9eeb3ce54978605bd8a54c22a1dea6
+2da1ae5f9f5e5e90f4
+Output = 287712c6dbed773f39925fec0ad686dfda4a679cc7e88fa60ba9d3a7d71
+2a11d4a0445995391ba56cfb018922e0d4bb4b25ec0965a33170c9b00f45c361b021
+5
 ~~~
 
 ### VOPRF Mode
@@ -842,94 +842,94 @@ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3
 KeyInfo = 74657374206b6579
-skSm = 00ef23ce13076b43a5a33e8fb8f94c940bbeabb762e5380d69cc9fa82c22a
-8de39431c99e8b9d9fb75ea90446f895db04fe402b8be2c9df839f7d10ea6a23e7e0
-eb4
-pkSm = 020006090cc9a6f2eaef7e12759a8b5362e9972b4f36c4b3a3d71c4b67469
-638593ed8f46291542e0f04fd462a8e8ab96047be087a9d3fb182f4c138c6fc95659
-3b205
+skSm = 00fb5507f94782c5b72acc16b9eb21064f86b4aa525b9865258d157b0431a
+b5c3515fc975fa19ddb28129c969992b31d8946c4e354bc49458bb25fae58f10ac3f
+678
+pkSm = 0301322c63ad53e079791739169e011f362f4396a8e93fceeee9cd814d471
+80e75ffd717820fe9e9c763fa595340cd80989c31fbd0200572080752c73b80b7532
+2f300
 ~~~
 
 #### Test Vector 1, Batch Size 1
 
 ~~~
 Input = 00
-Blind = 01dd6b45efbc57c5f087181c9f03d5b5e51b3a90cc9da17604b2e59a9375
-9eb0985d2259c20e3783be009527adf47f8fb5b1437cba7731c34ac70bc6ab1b8c14
-ff42
-BlindedElement = 0201b93fc5997dc0e8acd5b3ffa3a6f1be1522986c17ed60e5b
-ad7b057136b3b7e31b5a7073a744a1304bf9bce4a27b02d77f1caf73a5f72686fa9e
-83dbe9f730b4304
-EvaluationElement = 0301142205a8fb983efb6d76111db30e2a6e7c54724fe0ee
-54f842a477cbf03adcb2cca8df2f165a65694e7a056948f8afd651b32ea8153cc26f
-819cc5b1243f383910
-Proof = 00fd70ea3e4b7b008de749adb7403ca66f7aa56ae06a587d7d74a06daf6d
-5c4dcce8a81acdbee1fcd21ce55db4440383b9fcfc1d584db6fa022a5fd62595c7d9
-39820116ad656f5ad470b5bdd208248a0a0b064960c80e180239691c5eb77b4a760e
-eda8c27cf3cddc37d6329ad4997a37ffe9aba6f96d45e3e67fad86ec7b1d3a47487f
-ProofRandomScalar = 01ce330164821b9b2a108e3ef8964622075015ac9ea0f838
-0dcce04b4c70b85f82bd8d1806c3f85daa0e690689a7ed6faa65712283a076c4eaee
-988dcf39d6775f40
-Output = b3e837431aaafdfa8efbf486d70ca2d4364ef86afc7a8941d9bf1a6adb7
-bfd8c5302f91ee5796d956b5d3ea95fd0138d55d3059b1f4febf8cfd552e31fa2cf9
-7
+Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
+88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 02016dafe8eee47b591592705ce4d5231563b637e5a51b425b8
+81f1cc576c53caae4ec59fd6e3a918d5c35e6db77cf3a5862b71a8b6c7eaded3ebdf
+0c6e14778c03a8c
+EvaluationElement = 020124a0ee09ade261bbf67e1e3d296655c97e6c5c14c71a
+386e636d8f55d29f5f6dcec954ff28bfc7e6e63240a52bf278ae94b312be3d8bf850
+55d2a1dbab687905b0
+Proof = 00156561564a9128de6e2fb92d0ee065bb19192ff86549c37fab777f2d57
+a951ff94b3832162cf02ad73287a0f0906045878105d8ab54a7cc9a1a0039d0cb241
+ebd10197e5cef77e8fbe0414f86b86fe2e823e0d8dbdcf2ccac54d273e814da062ba
+941a27d1e7e28c44cdbdaffe392cc915bf8b9add15d51b68afd6e88a52d07ff8b3d1
+ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07
+3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c
+e45c405d1348b7b1
+Output = 16a9387153bf7fa2c733d42f299877324cfce3b39093e72067c3d59948b
+f745d77b2fe9180ffb442ec45b575eb4108d2b6f207cbfabd7bc540ad2a087cfabca
+2
 ~~~
 
 #### Test Vector 2, Batch Size 1
 
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = 001745a97be4680b39889979a8b4b4322450628389ff2d90c0799597e99c
-926ae54b2fce5ca13daa8cabbd4da53324fbd20554f2c56460442edb7d6ee76b64ab
-68d1
-BlindedElement = 0300c2eed082810750dc327122ac1d9de647d1943f1767bd546
-56835ef71dd68347436c121df49c997b0adb11cc421ec8abc5611b6d9e86468e4666
-001e3db386ace9f
-EvaluationElement = 02002ddf4ceaed6eefea8f12ca765c6d800e3f514f4fc75f
-52f55a555cbecfb724f2bde39d5890f4b0dfcd3ea9029f663c7babddb30dd0692bfe
-0f76190b7ee30bf68a
-Proof = 018d1fbf1bc79cb4636d905f03bba48e0d872ac89c4c7e8bcc6884dc796d
-22ceb648dd373b196d23335052a8d8013b154b38d233d68612213e3cea8f9024a1d0
-1e160004438ef7171638b7799a987739064e2313f9a902413d1f11f0eb5c7e8ca00d
-9c83d03aa12bef8059144bc169bec7f4258858438daaa3ebdacad658e5f3eb7c6d5b
-ProofRandomScalar = 0013559a0599ff077b4ebcbe7f73e9fc1bc25fff3fc5fd6c
-8bc664e27822fdece106def4a69460e9777347a314fbbe5035803d3aa65819e81997
-c4d89909e25ce20e
-Output = e8f92bac6c7ae89918d724697d8c45da339f55b61d527c50104e6658280
-3a8e6dcceae31b0d499e471aca460194a011d6b8b94fe2886b8b5a0c242079bfbf09
-c
+Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
+88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 02008f585341e32244d67033ddcf4c1cc30f7661c4cfc177f09
+82c69bf9c90e1da02d86a26ece60b8c42b278a1dc85afcc9cbc6aedff15cc092af03
+5100b915c2bb4df
+EvaluationElement = 03006cfeb22e141859e6a2050a714bde8ab8109abb2b42bc
+8f18ace67121c1811c9e95e7cf8ffd4f13f8cee80fc3c69318b0eb30ecdf6e7d7e84
+faefa6f0b8299217fe
+Proof = 01db7070ab756e8c2b12cb81c40daac6ef1d5137be3626a10ee867b0b736
+ae5ab05aadbc3ee3d1d0202b7687e1614765893cba67b307c67a8a4ce7b3eaf3ba64
+204901ce6f8dc9234d27373b1027982d7e3bb196d157403f50c2f1bf0fa701753ef6
+3d7265c0b1016e662456d4bdea55b3d983350b2c2ce80e192897161a1b780046b952
+ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07
+3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c
+e45c405d1348b7b1
+Output = 0163635204be5347419796f3564b36d6e89c9170e4fcca5b6df79d3f676
+f641b2ae3ae1a64cc49f3d788e276abe14e3c38bb2f92fdba0b45ed122a6930e7d96
+1
 ~~~
 
 #### Test Vector 3, Batch Size 2
 
 ~~~
 Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
-Blind = 017b1679ed98960e4cee27f330d5d3dccebf40596dc7e8b057938841423f
-8b336f12c6c4dfa3a822d8f670e5aa46e733baaec9f93d5e14ad9ab99dfcbcb2ad15
-7a8b,00010fddc6356f1aa3fb05702631e213b4bbbe8fe5176fff25526ed5b1772ba
-6164952c3c2da8017fdf337f81f5cbd0ec805923a335fa1bde3dbb840b3924c5ceba
-6
-BlindedElement = 03001658908fb353f15fd637ec5b9703cc1dfe5a8aab4f5fd51
-9c0e41f69300769918d28963c07e5678ecb98c235c406f29dd1cd1dadadb4e23b98a
-1cb290992b9aa46,030123068d8554e65999a6df1fde0bf10550ec5e223ef1d30c07
-3dee509933502a59106aae80e67d33f93400e2c32b5d9bd49f4e8cb97f08f4181998
-d330013b9e07a3
-EvaluationElement = 03012d790d77da1675a8e4ca5d9ce622046e31ea4af9511f
-a32ef80fbe60e9e04866feeb7f31818c1ff0ed263cecf07f787129450f9f7322fa9b
-593edc5cb626d1abb8,020198f45b9988bf0ab56c37bbaed0df4099c9b7b7a89b5c7
-030a451687cd9f8fd777f587dd7dcd717f529149d21c0763da4a03441d96e6fa2458
-88a352d08ddda70db
-Proof = 01d6f0f91660fc391573f819587ad310bf3da80a2dd4cda113c1fbbec9d1
-cd88a0e4d783833c4c64bbcb6414688d925af2a4a5845b2e3b6634df5e5d901047d5
-148f01a1ec61207132162fc851126b07397beeeae6814e8e135e4a03ca8bd346568d
-23c85e0a64b9b83de207ff8d17674863bde02eaeb0fa16d05a9b44cb01654bd0806d
-ProofRandomScalar = 001caeef2365ebf9c1edbdb24825e5735614aaf644f03458
-a1f30c90229f8068bec0ae930eef110e98ea1cbc6d849b4c9ca5b7a970d0320ba5f4
-f95f5cd4f501d720
-Output = b3e837431aaafdfa8efbf486d70ca2d4364ef86afc7a8941d9bf1a6adb7
-bfd8c5302f91ee5796d956b5d3ea95fd0138d55d3059b1f4febf8cfd552e31fa2cf9
-7,e8f92bac6c7ae89918d724697d8c45da339f55b61d527c50104e66582803a8e6dc
-ceae31b0d499e471aca460194a011d6b8b94fe2886b8b5a0c242079bfbf09c
+Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
+88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364,015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e073a04aa5d92b3fb7
+39f56f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b
+1
+BlindedElement = 02016dafe8eee47b591592705ce4d5231563b637e5a51b425b8
+81f1cc576c53caae4ec59fd6e3a918d5c35e6db77cf3a5862b71a8b6c7eaded3ebdf
+0c6e14778c03a8c,03005467c05309dd2b9ef584dd33ae30e93ae5508f2ceda71497
+63b4b44fe797f7d0f4c7441298a0ed821ede9ebdc8c0215f96db57c64feb734a145f
+00d00f0f222db1
+EvaluationElement = 020124a0ee09ade261bbf67e1e3d296655c97e6c5c14c71a
+386e636d8f55d29f5f6dcec954ff28bfc7e6e63240a52bf278ae94b312be3d8bf850
+55d2a1dbab687905b0,0300fdf99a9eb28097074daf75ba9fe16868690b16165f58f
+9c4fa266d5fffa5a87026a98ac3b0ca6dc7e42f49140a004c325646aec5ddc778db7
+08748cc2f632ed937
+Proof = 01935896f4c03ea5257d6471677f191ea7dfc777cc1e15f82e423cf1948c
+440ee56a1c5a8627aad8da8e507a7f382b45255e55a1f1afc99c6b14237ce7cf0855
+40fa000fe413be351bd11ac910b1d4af34d2c97c7b7a53438340dd659272f3d86470
+35b13cd8072903b9a3adf8e89bfb1f77d732fa224f32674506e3e88e29ce182186e3
+ProofRandomScalar = 01ec21c7bb69b0734cb48dfd68433dd93b0fa097e722ed24
+27de86966910acba9f5c350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba
+51943c8026877963
+Output = 16a9387153bf7fa2c733d42f299877324cfce3b39093e72067c3d59948b
+f745d77b2fe9180ffb442ec45b575eb4108d2b6f207cbfabd7bc540ad2a087cfabca
+2,0163635204be5347419796f3564b36d6e89c9170e4fcca5b6df79d3f676f641b2a
+e3ae1a64cc49f3d788e276abe14e3c38bb2f92fdba0b45ed122a6930e7d961
 ~~~
 
 ### POPRF Mode
@@ -939,12 +939,12 @@ Seed = a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a
 3a3
 KeyInfo = 74657374206b6579
-skSm = 01f8c6fb8fb3265b70e97870f942f7de645132f694c139446ab758871bdf0
-058a2a83b4679fc9fc1c6a0936b2f2e8e079a75b20688d4fe828e74d16bfc6255289
-92e
-pkSm = 03013db33ba3e475e5696be39d99fd9ffd96452c4fe78df4eef5723097943
-1f734aceefad464c4885b99313a775f5f4524db3c8404400169fd139ca053b75c6d7
-e848e
+skSm = 01e0993daeb97f8fc8176089e4e6adb4c03dc9b18daf7e976ed7fa6f3cb89
+c40c6a84156f20371ef23bfe6e049423244d7d746c79ad380ac7fe285aba162419e9
+012
+pkSm = 0301264d23f5d1d615f9747d2a7177a419dabde6ca0f5a047979dbe9bce33
+7241b7d2959025476f354c4f57017363d667b83b691fad8c172959963e6000de9533
+f187a
 ~~~
 
 #### Test Vector 1, Batch Size 1
@@ -952,25 +952,25 @@ e848e
 ~~~
 Input = 00
 Info = 7465737420696e666f
-Blind = 00dc9f04fb076cffe7d179d692a05b0c2210b6c008c1062c1e54514ef654
-eefc0519dd1867571c9d518e305fdf463231b6ec8b7498e2122a7a6033b6261a1696
-a773
-BlindedElement = 03009a6b363627cbc6ba5f241493a724a69ca7a85f203fb5100
-bde9f36ee57e3fe75a5b41d10c6d9a2799fcee9cd1f4bcd730cb8d9be7aa5e8a7a48
-8b6ae3004afd2a8
-EvaluationElement = 03009ae81470679a5c5733401488cc6648a522a208e698e9
-879307e794158ce508e08a50556ec66a055f05f5d5276231258d95d004a49a308037
-2f3e9d2075753c010f
-Proof = 0122e18e5c3e2242617098cf1d6b5868d66fb4f4816ddd3769e5b7f326f0
-ea3d79cd8b8b87be31c1acb9559a2ffdd13f4af7ee143e5081a2db996f3a7d2da839
-73e100f559c9dbb7b16df3d5f609d2f8f2184e9e204e6444db72608e4816beee31c8
-59dfabfe137bc3bae06947d767cd8cb6ad634134cf6faec24bc8341d51b584872ae1
-ProofRandomScalar = 00c07a53a1c70f44466b3861be4f8ef48c2bb1aec2e478e3
-41c467fd4a2638aeca63ed6c4bc48d008bca3f36f043e0eb73a44aba77e5e37d5ab1
-389e09b80a34cfaa
-Output = 70ad5e29de9f6e35f16afab3b97c1b26fdf6be0da60aff48a99980ddb8d
-7c2d728a8a5d2837179bfddd612712e014c0c9b9596cbb5a6ee6761c564dbb8921b4
-e
+Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
+88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 0200e36b187060fef4f4cfef21cdb4ef8b5793a1bf44da95229
+062303688d4cf6a50c16b7c943c79d91357223b56866351a17a9c7f49730fd28add9
+301d399c0cf206c
+EvaluationElement = 03014e216c05cf1d108829946891cc44693b0a411851a03f
+c439130054d920eb8ad596a4dfa5314f68d298a094777855aa55c98480575a3816cf
+ac52f838693e0e7fe5
+Proof = 00c5a46ff1e7d8cd2711daf8ec8752451c4c7ed815f3e8d51db64f1eed83
+a7cc33f0f99ce067676c478bd616a9ef6377994e4bd69051424a576a4e26f0ec7ed8
+1fd000b7ae1eaee9e5b6991afdbb2c9c29a04e2ab3a2066df89308410a59267a60a2
+2a47666de009646c78e9094c9f4de177a620e97f63e35ada0c8b438b4605248c9087
+ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07
+3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c
+e45c405d1348b7b1
+Output = 3be90ca19fbe2fc250de62792c7cf4b6b5555c8655fce1694fc7563d5d4
+c5001efd1e91fbbaea31d75e33dbdefe57420c395f1ac805cc0095c4d81a0beddcb0
+1
 ~~~
 
 #### Test Vector 2, Batch Size 1
@@ -978,25 +978,25 @@ e
 ~~~
 Input = 5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
 Info = 7465737420696e666f
-Blind = 0085ad3fc8c91caec3bd7699591b10d6da93877a470e128f38030627dffc
-bbf1f576b38677841fc47af778f9d85ac9bce6279388ddf4607e295e64cea6f4f950
-78b8
-BlindedElement = 0201eeaedeb3692cc0ecfeacdf9cab61947eb0d23bbfe2e1fbf
-8de0907f9410b6089d060d3af63411fd81b9d588fa2c48bf8ec63ec66c14b86d2371
-24042ca83fc99e1
-EvaluationElement = 0300886138e19945036ebe6f4195cf9f688d9e5a7c89597d
-feea6e0e5fcf4b53a9dfa280c8409b6abe8051e3394279d0b669440af8a27aad169d
-e10446eb88e09d6801
-Proof = 01cb4d8a14eeb472ee3e2fbfe3f6d49f3654cfe6238254bea17ce30848ca
-934e20e82c2a33d140de55b24fab047811e20b46f6dcaf3c0945c802e84891316186
-17ef001e233aa2c3d674bce7465278faab6300d4f6b5463e1597d74e2a69865bb068
-1604f9210edbf50bf341d836dc09af85e603b4b2b8b55c90c2efd979a4e312b653e1
-ProofRandomScalar = 003a09eed29f2e7f8950d766270d390db7a53b8080b89cb9
-e024e1e008d83bd90e94f501281b6b49c351c959348b3a65f24c6f74e77a62905a6d
-3e4b0b10600a7cbc
-Output = ee2d8e42030da6283ab59a11f41a171c65e208306e00c6f965a56c10f33
-bf0942bb38b7e1a33c70bc3542d27220379cbcef8b91898c720be948e9db214a14bb
-9
+Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
+88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364
+BlindedElement = 0300357933cc17cdcce862b794a4161d8eb10d23009695639e3
+fdc8dffc235e19e92e0a3d3c7c6249dd9dcd02da0a8f061d89b6809d3292951ee0e9
+ead21a62d1335fe
+EvaluationElement = 0300a5132ae9c429dd33b25c051f45451c6e54e154d698c3
+f3d8820bd9607e7a65762911c647b3460be166f37ba443bf000b23552298f14e0555
+b3f0ddf0e900e1d38c
+Proof = 0004f0791cbe6ac6f4074834e172beedea19ecd3a2c504a71fd870b42314
+d3b072633a8265c774668274dcbcaebf1726768fab4edec69a33a7d37095ebef3e1b
+b44900f0a175b56ceeae8a87bc5553405e0b030ebcf8303befc5890c8afa1e61fd41
+66480ff428eae4193f12bbf1fc31d5d7196ce8692e37bc9a63cdf4c9fafe10a2dc9a
+ProofRandomScalar = 015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e07
+3a04aa5d92b3fb739f56f9db001266677f62c095021db018cd8cbb55941d4073698c
+e45c405d1348b7b1
+Output = 1d90446522e3c131e90be2e4f372959ae5ab4f25ca98e83e5e62d6336c4
+8b5ec22fc6083d2b050cad2bbc22ae7115c2b934d965ffe74aaa43c905cd2af76728
+d
 ~~~
 
 #### Test Vector 3, Batch Size 2
@@ -1004,31 +1004,31 @@ bf0942bb38b7e1a33c70bc3542d27220379cbcef8b91898c720be948e9db214a14bb
 ~~~
 Input = 00,5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
 Info = 7465737420696e666f
-Blind = 019dd87ebabccec2627d4006b698d9ba57f6e207c989448d39fe0431e60c
-9a9a4110596d5a16fa6cdf3f66467524f295b5dc8f3492c6da02dd7387bd1dc40065
-b232,00adaeeed48a6f9a8fb57640c3bff88d3ab3cc52ef969f02beaba2c6e32c2f3
-7baaf4ee9c691833dc081e2a0fb6ff636525457a21c1fc56bf3514635ac7fb8618f7
-3
-BlindedElement = 030170a994d40e8517aed3a7efae01b650dc131c1ae07158f02
-ad70d211348a4b328add9d17e93d2e747dd8bc6960a5ab3bec6a9a29f793bf5663d0
-ab108b5f84fa751,03011045c5ea9567626cf6d2baa158830b035e66c249df4967bb
-bf917e64bf27e4ec49623704a7c621b32f05e1c7bf1b89960c82d4203c4efa6a1056
-e083be789d017f
-EvaluationElement = 0300fadd09cc84c7e91c2173be0e65ee3c1b6ef98cf0cdd7
-57ec432f12f13b5d457edc0311d61ddd831f8becd5231bdc492e92c9d0c103e55ea5
-16ee00fe64c10d0e8e,03005941fb7eabc6353a5c2e4a6b284b7b8ee8da6c4435af6
-c4c472195bb0deb44e7dc215299c7fe38feafa2b0a1a1db7dd3090c5ce8171247f64
-7da20e04acef8164d
-Proof = 0186deebd9e2db71ca43bcb57311371390c2d04ac9c3189e155f10c9c548
-f6f22c051d38203493176e8392ef405c783759c735cb6f7219636c140cb2dc070a11
-58c001bfdb12f34e00a582e22e1eb2fbdebcffe4b6e0818de5c50451617213e1ab20
-fa5392eb3b535206140a2619732c012d5f331a615755f5397feb9e1fb16d1320d20d
-ProofRandomScalar = 010a82559ee5e4ba79c390c4033405e3f792bc49daa905c6
-94707e7e0191104b34d68c7cc81c2e392da60b838eadf434b693d9b4f7c7beb31e37
-008156656c19382b
-Output = 70ad5e29de9f6e35f16afab3b97c1b26fdf6be0da60aff48a99980ddb8d
-7c2d728a8a5d2837179bfddd612712e014c0c9b9596cbb5a6ee6761c564dbb8921b4
-e,ee2d8e42030da6283ab59a11f41a171c65e208306e00c6f965a56c10f33bf0942b
-b38b7e1a33c70bc3542d27220379cbcef8b91898c720be948e9db214a14bb9
+Blind = 00d1dccf7a51bafaf75d4a866d53d8cafe4d504650f53df8f16f68616333
+88936ea23338fa65ec36e0290022b48eb562889d89dbfa691d1cde91517fa222ed7a
+d364,015e80ae32363b32cb76ad4b95a5a34e46bb803d955f0e073a04aa5d92b3fb7
+39f56f9db001266677f62c095021db018cd8cbb55941d4073698ce45c405d1348b7b
+1
+BlindedElement = 0200e36b187060fef4f4cfef21cdb4ef8b5793a1bf44da95229
+062303688d4cf6a50c16b7c943c79d91357223b56866351a17a9c7f49730fd28add9
+301d399c0cf206c,03007530916e8ec76199429667a82ca4df65b913d8b1fb157319
+e73706f118b4f46047c01b7da024bdf5a06f2f4e879b1a1cd3fcb1ca2c37ce158cc8
+625e76b3bb1cc4
+EvaluationElement = 03014e216c05cf1d108829946891cc44693b0a411851a03f
+c439130054d920eb8ad596a4dfa5314f68d298a094777855aa55c98480575a3816cf
+ac52f838693e0e7fe5,0200005cf5e719b3066dcf0fbd6228bc921cebccc49feb1ac
+be9d9c4c88f4169e1d0d5408f92ad9f599c2f5f6d7d4c6e575e86f64c4eead2bb9b3
+e8e04d141a90b7382
+Proof = 00d846f4a2a7722fe6a24e7257e43d88c3e01977282fba352c08fd38b69b
+f1df64f90660b03b73abba50cb389af3d602da66411401d3c9f87bcb6363d6406e0a
+cad3018a44bcda83524d4a48f0ed96ebca96d7626b634ba28fcba0c21956fc90c516
+859df8ba6edeb7a44daeeec51c3a56b79c1f9e211e9974e5f293ade221523953d12f
+ProofRandomScalar = 01ec21c7bb69b0734cb48dfd68433dd93b0fa097e722ed24
+27de86966910acba9f5c350e8040f828bf6ceca27405420cdf3d63cb3aef005f40ba
+51943c8026877963
+Output = 3be90ca19fbe2fc250de62792c7cf4b6b5555c8655fce1694fc7563d5d4
+c5001efd1e91fbbaea31d75e33dbdefe57420c395f1ac805cc0095c4d81a0beddcb0
+1,1d90446522e3c131e90be2e4f372959ae5ab4f25ca98e83e5e62d6336c48b5ec22
+fc6083d2b050cad2bbc22ae7115c2b934d965ffe74aaa43c905cd2af76728d
 ~~~
 "#;