Schnorr protocol: how does malicious verifier win? | Hacker News Reader