Editing Schnorr signature (section)

===Proof of correctness===
It is relatively easy to see that <math>e_v = e</math> if the signed message equals the verified message:

<math>r_v = g^s y^e = g^{k + xe} g^{-xe} = g^k = r</math>, and hence <math>e_v = H(r_v \parallel M) = H(r \parallel M) = e</math>.

Public elements: <math>G</math>, <math>g</math>, <math>q</math>, <math>y</math>, <math>s</math>, <math>e</math>, <math>r</math>. Private elements: <math>k</math>, <math>x</math>.

This shows only that a correctly signed message will verify correctly; many other properties are required for a secure signature algorithm.