BIP Halfagg: Match BIP340 challenge input to hacspec

Author: fjahr

half-aggregation.mediawiki

@@ -171,7 +171,7 @@ The algorithm ''VerifyAggregate(aggsig, pm_aggd<sub>0..u-1</sub>)'' is defined a
 ** Let ''P<sub>i</sub> = lift_x(int(pk<sub>i</sub>))''; fail if that fails
 ** Let ''r<sub>i</sub> = aggsig[i⋅32:(i+1)⋅32]''
 ** Let ''R<sub>i</sub> = lift_x(int(r<sub>i</sub>))''; fail if that fails
-** Let ''e<sub>i</sub> = int(hash<sub>BIP0340/challenge</sub>(bytes(r<sub>i</sub>) || pk<sub>i</sub> || m<sub>i</sub>)) mod n''
+** Let ''e<sub>i</sub> = int(hash<sub>BIP0340/challenge</sub>(bytes(r<sub>i</sub>) || P<sub>i</sub> || m<sub>i</sub>)) mod n''
 ** If ''i = 0'':
 *** Let ''z<sub>i</sub> = 1''
 ** Else: