one), which is part of the pre-image of μ. M := fromHex(tc.msg) H := sha3.NewShake256() tr := computePublicKeyHash(pk) H.Write(tr[:]) H.Write(M) μ := make([]byte, 64) H.Read(μ) t.Logf("Computed μ: %x", μ) sig, err := SignExternalMuDeterm(priv, μ) if err != nil { t.Fatalf("SignExternalMuDeterm: %v", err) } sigHashGot := sha256.Sum256(sig) sigHashWant := fromHex(tc.sigHash) if !bytes.Equal(sigHashGot[:], sigHashWant) { t.Errorf("Signature hash mismatch:\n got: %X\n want: %X", sigHashGot, sigHashWant) }...