Method finalize

merlin/src/transcript.rs:336–352

Use the supplied external `rng` to rekey the transcript, so that the finalized [`TranscriptRng`] is a PRF bound to randomness from the external RNG, as well as all other transcript data.

(mut self, rng: &mut R)

    /// randomness from the external RNG, as well as all other
    /// transcript data.
    pub fn finalize<R>(mut self, rng: &mut R) -> TranscriptRng
    where
        R: rand_core::RngCore + rand_core::CryptoRng,
    {
        let random_bytes = {
            let mut bytes = [0u8; 32];
            rng.fill_bytes(&mut bytes);
            bytes
        };

        self.strobe.meta_ad(b"rng", false);
        self.strobe.key(&random_bytes, false);

        TranscriptRng {
            strobe: self.strobe,
        }
    }
}

/// An RNG providing synthetic randomness to the prover.