I then say that the challenger checks the following:

- y * (R - xG) = 0
- y * ( Q - xH) = 0
- Q != xH or R != xG