. . "k is a parameter derived by both sides; for example, k = H(N, g)." . .