* @mp *q@ = order of the DSA group
* @mp *x@ = secret key
* @const octet *m@ = message hash
- * @const gchash *h@ = hash class
+ * @const gchash *ch@ = hash class
* @grand *r@ = random bit source, or null
*
* Returns: A nonce.
size_t bsz = 2*n + 2*ch->hashsz;
octet *b = XS_ALLOC(bsz);
octet *kb = b, *rb = kb + n, *hb = rb + ch->hashsz;
+ static const char prefix[] = "catacomb-dsa-nonce";
ghash *h;
mp_storeb(x, kb, n);
do {
for (j = 0; j < n; j += ch->hashsz) {
h = GH_INIT(ch);
+ GH_HASH(h, prefix, sizeof(prefix));
GH_HASHBUF32(h, kb, n);
GH_HASHBUF32(h, m, ch->hashsz);
if (r) GH_HASHBUF32(h, rb, ch->hashsz);